As it’s not easy to come by a list of what to do in development, we took the opposite approach and researched how to make our code as bad as possible, security wise. Some of the topics we covered:Metasploit / quasarAndroidbuffer overflow, stack smashing, etc.JWT on web and browser security (local/session store vs js store)WEB server HTTPS configASLR, W^X memory violations, CFIFor every mentioned topic we tried to explore ways to be as insecure as possible and learning how such an environment can be exploited.”