nginx-baseline

DevSec Nginx Baseline This Compliance Profile ensures, that all hardening projects keep the same quality. https://github.com/dev-sec/ansible-nginx-hardening https://github.com/dev-sec/chef-nginx-hardening https://github.com/dev-sec/puppet-nginx-hardening Standalone Usage This Compliance Profile...

chef-mysql-hardening

mysql-hardening Chef cookbook Description Provides security configurations for mysql. It is intended to set up production-ready mysql instances that are configured with minimal surface for attackers. This cookbook focus security configuration of mysql and reuses the mysql cookbook for the...

chef-os-hardening

os-hardening Chef cookbook 1 2 Description This cookbook provides numerous security-related configurations, providing all-round base protection. It configures: Configures package management e.g. allows only signed packages Remove packages with known issues Configures pam and pamlimits module Shad...

DevSec-Defense

DevSec-Defense Accompanying PowerShell Modules & Demos for DevSec Defense Presentation DevSec Defense: How DevOps Practices Can Drive Detection Development For Defenders...

ansible-ssh-hardening

ssh-hardening Ansible Role Attention: This role has been migrated to our hardening-collection: https://github.com/dev-sec/ansible-os-hardening/ https://galaxy.ansible.com/devsec/hardening Please open any issues and pull requests there! Requirements Ansible 2.5 Role Variables networkipv6enable...

The Ultimate Security Blind Spot You Don't Know You Have

How much time do developers spend actually writing code? According to recent studies, developers spend more time maintaining, testing and securing existing code than they do writing or improving code. Security vulnerabilities have a bad habit of popping up during the software development process,...

Wix.com Cross Site Scripting

57 million web pages are affected by a security problem in wix.com Proof of concept of a web page made in wix.com: http://www.itsec.cl/ to see the source code can observe the following: ... Find the SEO content of this site's homepage via http://www.itsec.cl/?escapedfragment= That is where search...

Web App Pentesting - PenTest Magazine

Web App Pentesting - Pentest Magazine The significance of HTTP and the Web for Advanced Persistent Threats Web Application Security and Penetration Testing Developers are form Wenus, Application Security guys from Mars Pulling legs of Arachni XSS BeeF Metaspolit Exploitation Cross-site request...