diff --git a/REST_CS_Migrate.md b/REST_CS_Migrate.md index 49c17915d5..04480b0448 100644 --- a/REST_CS_Migrate.md +++ b/REST_CS_Migrate.md @@ -65,4 +65,4 @@ Lastly, when [fuzzing](https://owasp.org/www-community/Fuzzing), don't forget to ## Related Resources - [REST Security Cheat Sheet](https://cheatsheetseries.owasp.org/cheatsheets/REST_Security_Cheat_Sheet.html) - the other side of this cheat sheet -- [RESTful services, web security blind spot](https://xiom.com/2016/10/31/restful-services-web-security-blind-spot/) - a presentation (including video) elaborating on most of the topics on this cheat sheet. +- [RESTful services, web security blind spot](https://www.youtube.com/watch?v=pWq4qGLAZHI) - avideo presentation elaborating on most of the topics on this cheat sheet. diff --git a/document/4-Web_Application_Security_Testing/11-Client-side_Testing/10-Testing_WebSockets.md b/document/4-Web_Application_Security_Testing/11-Client-side_Testing/10-Testing_WebSockets.md index 3608e4b2be..4050326850 100644 --- a/document/4-Web_Application_Security_Testing/11-Client-side_Testing/10-Testing_WebSockets.md +++ b/document/4-Web_Application_Security_Testing/11-Client-side_Testing/10-Testing_WebSockets.md @@ -78,4 +78,4 @@ Gray-box testing is similar to black-box testing. In gray-box testing, the pen-t - [IETF - The WebSocket Protocol](https://tools.ietf.org/html/rfc6455) - [Christian Schneider - Cross-Site WebSocket Hijacking (CSWSH)](https://www.christian-schneider.net/blog/cross-site-websocket-hijacking/) - [Robert Koch- On WebSockets in Penetration Testing](https://repositum.tuwien.at/retrieve/21955) -- [DigiNinja - ZAP and Web Sockets](https://digi.ninja/blog/zap_web_sockets.php +- [DigiNinja - ZAP and Web Sockets](https://digi.ninja/blog/zap_web_sockets.php)