#Beacon

Forwarded from CYBER-SEC ™️

8:11:52

Media is too big

VIEW IN TELEGRAM

day-4-fswa

267 viewsDp3 #Beacon, 15:23

#Beacon

Ищем нульдеи и пушимся в вебе, интересные курсики с другого канала

293 viewsDp3 #Beacon, 15:23

#Beacon

Google chrome prototype pollution scanner(при хождениям по страницам находит вулны):
https://github.com/msrkp/PPScan

Еще есть более современный и лучший вариант, легко автоматизируется под багбаунти:
https://github.com/edoardottt/pphack

GitHub

GitHub - msrkp/PPScan: Client Side Prototype Pollution Scanner

Client Side Prototype Pollution Scanner. Contribute to msrkp/PPScan development by creating an account on GitHub.

295 viewsDp3 #Beacon, edited 16:49

#Beacon

О prototype pollution, полный гайд в том числе о сохраненной на сервере, когда полюшен вызывается даже если пользователь посетил ссылку без наших действий(stored prototype pollution).
https://habr.com/ru/companies/huawei/articles/547178/

Хабр

JavaScript prototype pollution: практика поиска и эксплуатации

Если вы следите за отчетами исследователей, которые участвуют в bug bounty программах, то наверняка знаете про категорию уязвимостей JavaScript prototype pollution. А если не следите и встречаете это...

331 viewsDp3 #Beacon, edited 16:51

#Beacon

https://labs.detectify.com/security-guidance/10-types-of-web-vulnerabilities-that-are-often-missed/

Labs Detectify

10 Types of Web Vulnerabilities that are Often Missed - Labs Detectify

Crowdsource hackers Hakluke and Farah Hawa share the top web vulnerabilities that are often missed during security testing. When hunting for bugs, especially on competitive bug bounty ...

274 viewsDp3 #Beacon, 08:52

#Beacon

Comparative Analysis of Open-Source Tools for Conducting Static Code Analysis

https://www.mdpi.com/1424-8220/23/18/7978

#Beacon

MDPI

Comparative Analysis of Open-Source Tools for Conducting Static Code Analysis

The increasing complexity of web applications and systems, driven by ongoing digitalization, has made software security testing a necessary and critical activity in the software development lifecycle. This article compares the performance of open-source tools…

282 viewsDp3 #Beacon, edited 21:12

#Beacon

https://chpk.medium.com/top-10-open-source-sast-tools-bc860e9dfb2e

Medium

TOP 10 open source SAST tools for DevSecOps

1. SonarQube

290 viewsDp3 #Beacon, 21:40

#Beacon

Forwarded from CyberSecurityTechnologies (-CST-)

AI_vuln_fixes.pdf

292.7 KB

#Sec_code_review
"AI-powered patching: the future of automated vulnerability fixes", 2024.

238 viewsDp3 #Beacon, 21:57

#Beacon

https://www.researchgate.net/publication/370061049_Machine_Learning-Based_Run-Time_DevSecOps_ChatGPT_Against_Traditional_Approach?clckid=ca4642d1

ResearchGate

(PDF) Machine Learning-Based Run-Time DevSecOps: ChatGPT Against Traditional Approach

PDF | DevSecOps paradigm strives to provide the extension of the already approved DevOps practice by tackling the issues related to security in both... | Find, read and cite all the research you need on ResearchGate

255 viewsDp3 #Beacon, 22:14

#Beacon

https://dev.to/aws-builders/find-source-code-vulnerabilities-with-codeql-before-you-commit-2hof

DEV Community

Find Source Code Vulnerabilities with CodeQL Before You Commit

You have a plethora of Python code to commit for your new Django API. STOP! Before you commit and...

259 viewsDp3 #Beacon, 22:30

#Beacon

Огромный список базовых инструментов - от багбаунти и ханипотов до различных репорт билдеров, бинарной эксплуатации

https://inventory.raw.pm/tools.html

#Beacon

inventory.raw.pm

Rawsec's CyberSecurity Inventory

An inventory of tools and resources about CyberSecurity

278 viewsDp3 #Beacon, edited 23:18

#Beacon

K9M-01-K-9-Mail-Mobile-Audit.pdf

1.1 MB

K9M-01-K-9-Mail-Mobile-Audit.pdf

Репорт об аудите аутсорсовой компанией соурс кода mozilla с помощью semgrep(pdf файл)

274 viewsDp3 #Beacon, edited 23:21

#Beacon

Forwarded from CYBER-SEC ™️

248 viewsDp3 #Beacon, 07:36