STEWS

STEWS: WebSocketのセキュリティテストと列挙 STEWSはWebSocketのセキュリティテストのためのツールスイートです。 この研究はOWASP Global AppSec US 2021で初めて発表されました。 機能 STEWSは以下の機能を提供します： 発見 : ドメインのリストをテストしてWeb上のWebSocketエンドポイントを見つける フィンガープリント : エンドポイントで動作しているWebSocketサーバーを特定する 脆弱性検出 : WebSocketサーバーが既知のWebSocket脆弱性に対して脆弱かどうかをテストする...

Replacing Security Best Practices With Things That Work

NEW YORK–The term “best practices” is high on the list of overused and nearly meaningless phrases that get thrown around in the security field. It forms the basis for regulations such as HIPAA and PCI DSS and yet if you asked a random sample of 10 security people what the phrase meant, you’d like...

Behind the Numbers of Mozilla's Bug Bounty Program

Bug bounty programs have been around in various forms for more than 15 years now, and many of the larger software companies, including Mozilla and Google, have established rewards for people who report bugs. But, aside from the amount of money that’s paid out when bugs are fixed, there hasn’t bee...

OWASP Hackademic Challenges Project

The OWASP Hackademic Challenges Project is an open source project that helps you test your knowledge on web application security. You can use it to actually attack web applications in a realistic but also controlable and safe environment. On the left menu you can see all attack scenarios that are...