DevSec-Defense

DevSec-Defense Módulos de PowerShell y demos complementarios para la presentación de DevSec Defense DevSec Defense: Cómo las prácticas de DevOps pueden impulsar el desarrollo de detección para defensores...

linux-baseline

DevSec Linux Baseline Este perfil de cumplimiento asegura que todos los proyectos de hardening mantengan la misma calidad. https://github.com/dev-sec/puppet-os-hardening https://github.com/dev-sec/chef-os-hardening https://github.com/dev-sec/ansible-os-hardening Uso Independiente Este perfil de...

nginx-baseline

DevSec Nginx Línea Base Este perfil de cumplimiento asegura que todos los proyectos de hardening mantengan la misma calidad. https://github.com/dev-sec/ansible-nginx-hardening https://github.com/dev-sec/chef-nginx-hardening https://github.com/dev-sec/puppet-nginx-hardening Uso Independiente Este...

mysql-baseline

Línea Base MySQL de DevSec Este Perfil de Cumplimiento asegura que todos los proyectos de hardening mantengan la misma calidad. https://github.com/dev-sec/ansible-collection-hardening/tree/master/roles/mysqlhardening https://github.com/dev-sec/chef-mysql-hardening...

chef-ssh-hardening

ssh-hardening Chef cookbook Description This cookbook provides secure ssh-client and ssh-server configurations. This cookbook does not provide capabilities for management of users and/or ssh keys, please use other cookbooks for that. Requirements Chef = 14.13.11 Platform Debian 8, 9, 10 Ubuntu...

The Ultimate Security Blind Spot You Don't Know You Have

How much time do developers spend actually writing code? According to recent studies, developers spend more time maintaining, testing and securing existing code than they do writing or improving code. Security vulnerabilities have a bad habit of popping up during the software development process,...

Wix.com Cross Site Scripting

57 million web pages are affected by a security problem in wix.com Proof of concept of a web page made in wix.com: http://www.itsec.cl/ to see the source code can observe the following: ... Find the SEO content of this site's homepage via http://www.itsec.cl/?escapedfragment= That is where search...

Web App Pentesting - PenTest Magazine

Web App Pentesting - Pentest Magazine The significance of HTTP and the Web for Advanced Persistent Threats Web Application Security and Penetration Testing Developers are form Wenus, Application Security guys from Mars Pulling legs of Arachni XSS BeeF Metaspolit Exploitation Cross-site request...