Collaborate Disseminate
I am trying to create a security checklist for developers/testers of web applications to make sure that the web app is compliant with all the security guidelines.
When looking at the different standards available, I found OWASP top 10, OWA… Continue reading Which standard can be used to seed security checklist for web application?
In Linux, I can use sysdig to track every command launched by any users (even the ones inside a bash file) and print them to the console.
I wish I could do the same in Windows, I’d like the same behaviour for batch files, but I encountered… Continue reading Windows: track cmd executions [closed]
I want to be able to instrument and analyze at a prebuilt server and get a list of every file read.
I would also like to determine which of those files were read by the kernel to execute a program, load a library or just read by an applica… Continue reading I would like to audit a unbuntu server to get a list of all files executed and all files read by the kernel [migrated]
In their GitHub account I do not see repository for the Windows Proton Drive app. And how about server side?
Continue reading Are All Proton Products Open Source? [closed]
I developed the following C# algorithm to prevent XSS attacks:
private bool Is_There_XSS_Payload(string arg)
{
Regex regex = new Regex(@"^[a-zA-Z0-9]+$");
bool result = regex.IsMatch(arg);
return result;
… Continue reading XSS Payload That Can Bypass Special Character Check
I have a report by foresiet for a company’s website.
There’s a bunch of files in the output.
One example in App Misconfiguration :
344
x.x.x.x
my-domain.io
Weak SSH cipher supported!
Medium
Open
Found in scan
345
x.x.x.x
my-domain.io
Weak… Continue reading remediation for security related issues
As usual, I ordered a CentOS 7 virtual machine from my hoster. Installed a firewalld and docker on it. In docker, through docker-compose, I launched a web application that hangs on the standard port 80. And after a couple of days I found t… Continue reading How did I get hacked? [closed]
Are there any industry recommendations with regards to allowing users access to quarantined emails in Office 365? Should users be notified of quarantined emails. Should they be allowed to request the release of quarantined emails? I ask be… Continue reading User Access to Quarantined Emails
I am currently analyzing our security landscape with the help of the MITRE ATT&CK Framework. Most techniques have ways to "Mitigate" and to "Detect" it, and one of the most prevalent security tool we have in place i… Continue reading How to find out what Microsoft 365 Defender is monitoring?
I’m currently securing a Linode VPS that will host a WordPress store and two Python web applications. Security-wise, I’ve run the most "basic" steps, such as hardening SSH access (i.e. disabling password & root login), settin… Continue reading Which of the following Linys auditing suggestions are worthwhile?