ssh-baseline

DevSec SSH 基线 此合规配置文件确保所有加固项目保持相同的质量。 https://github.com/dev-sec/puppet-ssh-hardening https://github.com/dev-sec/chef-ssh-hardening https://github.com/dev-sec/ansible-ssh-hardening 独立使用 此合规配置文件需要 InSpec 来执行： $ git clone https://github.com/dev-sec/ssh-baseline $ inspec exec ssh-baseline 您也可以直接从...

linux-baseline

DevSec Linux 基线 此合规配置文件确保所有加固项目保持相同的质量。 https://github.com/dev-sec/puppet-os-hardening https://github.com/dev-sec/chef-os-hardening https://github.com/dev-sec/ansible-os-hardening 独立使用 此合规配置文件需要 InSpec 来执行： $ git clone https://github.com/dev-sec/linux-baseline $ inspec exec linux-baseline 你也可以直接从...

mysql-baseline

DevSec MySQL 基线 此合规性配置文件确保所有加固项目保持相同的质量。 https://github.com/dev-sec/ansible-collection-hardening/tree/master/roles/mysqlhardening https://github.com/dev-sec/chef-mysql-hardening https://github.com/dev-sec/puppet-mysql-hardening 独立使用 此合规性配置文件需要 cinc-auditor 或 InSpec 来执行： git clone...

DevSec-Defense

DevSec-Defense DevSec Defense 演示的配套 PowerShell 模块与示例 DevSec Defense：DevOps 实践如何推动防御者的检测开发...

nginx-baseline

DevSec Nginx Línea Base Este perfil de cumplimiento asegura que todos los proyectos de hardening mantengan la misma calidad. https://github.com/dev-sec/ansible-nginx-hardening https://github.com/dev-sec/chef-nginx-hardening https://github.com/dev-sec/puppet-nginx-hardening Uso Independiente Este...

The Ultimate Security Blind Spot You Don't Know You Have

How much time do developers spend actually writing code? According to recent studies, developers spend more time maintaining, testing and securing existing code than they do writing or improving code. Security vulnerabilities have a bad habit of popping up during the software development process,...

Wix.com Cross Site Scripting

57 million web pages are affected by a security problem in wix.com Proof of concept of a web page made in wix.com: http://www.itsec.cl/ to see the source code can observe the following: ... Find the SEO content of this site's homepage via http://www.itsec.cl/?escapedfragment= That is where search...

Web App Pentesting - PenTest Magazine

Web App Pentesting - Pentest Magazine The significance of HTTP and the Web for Advanced Persistent Threats Web Application Security and Penetration Testing Developers are form Wenus, Application Security guys from Mars Pulling legs of Arachni XSS BeeF Metaspolit Exploitation Cross-site request...