mysql-baseline

DevSec MySQL 基线 此合规性配置文件确保所有加固项目保持相同的质量。 https://github.com/dev-sec/ansible-collection-hardening/tree/master/roles/mysqlhardening https://github.com/dev-sec/chef-mysql-hardening https://github.com/dev-sec/puppet-mysql-hardening 独立使用 此合规性配置文件需要 cinc-auditor 或 InSpec 来执行： root@kitploit: git clone...

DevSec-Defense

DevSec-Defense Módulos de PowerShell y demos complementarios para la presentación de DevSec Defense DevSec Defense: Cómo las prácticas de DevOps pueden impulsar el desarrollo de detección para defensores...

linux-baseline

DevSec Linux 基线 此合规配置文件确保所有加固项目保持相同的质量。 https://github.com/dev-sec/puppet-os-hardening https://github.com/dev-sec/chef-os-hardening https://github.com/dev-sec/ansible-os-hardening 独立使用 此合规配置文件需要 InSpec 来执行： root@kitploit: $ git clone https://github.com/dev-sec/linux-baseline $ inspec exec...

ssh-baseline

DevSec SSH 基线 此合规配置文件确保所有加固项目保持相同的质量。 https://github.com/dev-sec/puppet-ssh-hardening https://github.com/dev-sec/chef-ssh-hardening https://github.com/dev-sec/ansible-ssh-hardening 独立使用 此合规配置文件需要 InSpec 来执行： root@kitploit: $ git clone https://github.com/dev-sec/ssh-baseline $ inspec exec...

nginx-baseline

DevSec Nginx 基线 此合规性配置文件确保所有加固项目保持相同的质量。 https://github.com/dev-sec/ansible-nginx-hardening https://github.com/dev-sec/chef-nginx-hardening https://github.com/dev-sec/puppet-nginx-hardening 独立使用 此合规性配置文件需要 InSpec 来执行： root@kitploit: $ git clone https://github.com/dev-sec/nginx-baseline $ inspec...

The Ultimate Security Blind Spot You Don't Know You Have

How much time do developers spend actually writing code? According to recent studies, developers spend more time maintaining, testing and securing existing code than they do writing or improving code. Security vulnerabilities have a bad habit of popping up during the software development process,...

Wix.com Cross Site Scripting

57 million web pages are affected by a security problem in wix.com Proof of concept of a web page made in wix.com: http://www.itsec.cl/ to see the source code can observe the following: ... Find the SEO content of this site's homepage via http://www.itsec.cl/?escapedfragment= That is where search...

Web App Pentesting - PenTest Magazine

Web App Pentesting - Pentest Magazine The significance of HTTP and the Web for Advanced Persistent Threats Web Application Security and Penetration Testing Developers are form Wenus, Application Security guys from Mars Pulling legs of Arachni XSS BeeF Metaspolit Exploitation Cross-site request...