STEWS

STEWS: 웹소켓 보안 테스트 및 열거 STEWS는 웹소켓 보안 테스트를 위한 도구 모음입니다. 이 연구는 다음에서 처음 발표되었습니다. OWASP Global AppSec US 2021 기능 STEWS는 다음 기능을 제공합니다: 발견 : 도메인 목록을 테스트하여 웹에서 웹소켓 엔드포인트를 찾습니다. 핑거프린팅 : 엔드포인트에서 실행 중인 웹소켓 서버를 식별합니다. 취약점 탐지 : 웹소켓 서버가 알려진 웹소켓 취약점에 취약한지 테스트합니다. 이 저장소에 포함된 백서는 수행된 연구에 대한 자세한 내용을 제공합니다. 포함된 슬라...

Replacing Security Best Practices With Things That Work

NEW YORK–The term “best practices” is high on the list of overused and nearly meaningless phrases that get thrown around in the security field. It forms the basis for regulations such as HIPAA and PCI DSS and yet if you asked a random sample of 10 security people what the phrase meant, you’d like...

Behind the Numbers of Mozilla's Bug Bounty Program

Bug bounty programs have been around in various forms for more than 15 years now, and many of the larger software companies, including Mozilla and Google, have established rewards for people who report bugs. But, aside from the amount of money that’s paid out when bugs are fixed, there hasn’t bee...

OWASP Hackademic Challenges Project

The OWASP Hackademic Challenges Project is an open source project that helps you test your knowledge on web application security. You can use it to actually attack web applications in a realistic but also controlable and safe environment. On the left menu you can see all attack scenarios that are...