This Web application security checklist will help you to implement the best security practices & how you can protect your solution from any data leaks.
原文地址：Web Application Security Checklist原文作者：Teo Selenius（已授权）译者 & 校正：HelloGitHub-小熊熊 & 卤蛋 对于开发者而言，网络安全的重要性不言而喻。任何一处代码错误、一个依赖项漏洞或是数据库的端口暴露到公网，都会有可能直接送你上热搜。那么，哪里可以找到详细的避雷指引呢？OWASP's top 10 ...
最后,如果你担心 CSP 会影响生产环境,可以先以 Report-Only 模式进行部署: Content-Security-Policy-Report-Only: default-src 'self'; form-action 'self' 8、设置 HttpOnly 的 Cookie,保护用户免受 XSS 攻击 为Cookie 设置 HttpOnly 属性,可以防止 Cookie 被 JavaScript 代码访问。一旦跨脚本攻击发生,该设置也会...
In short, OWASP is a repository of all things web-application-security, backed by the extensive knowledge and experience of its open community contributors.开放Web应用安全项目(OWASP)是一个致力于提高软件安全性的非营利性基金会。OWASP在“开放社区”模式下运行,任何人都可以参与项目、活动、在线聊天等,...
Developing a secure Web application is very difficult task. Therefore developers need a guideline to help them to develop a secure Web application. Guideline can be used as a checklist for developer to achieve minimum standard of secure Web application. This study evaluates how good is OWASP ...
OWASP测试清单v4-https://www.owasp.org/index.php/Testing_Checklist 在Web漏洞评估期间要测试的一些控件列表 w3af-http://w3af.org/ w3af是一个Web应用程序攻击和审计框架。该项目的目标是创建一个框架,通过查找和利用所有Web应用程序漏洞来帮助您保护Web应用程序 ...
[298星][1y] [Shell] yw9381/burp_suite_doc_zh_cn 这是基于Burp Suite官方文档翻译而来的中文版文档 [297星][5m] tanprathan/owasp-testing-checklist OWASP based Web Application Security Testing Checklist is an Excel based checklist which helps you to track the status of completed and pending test...
Dynamic Application Security Testing (DAST): DAST tools interact with a running web application, probing for security issues like input validation vulnerabilities, authentication flaws, and more. Burp Suite and OWASP ZAP are popular DAST tools that can be used for this purpose. Website Security ...
OWASP Web Application Security Testing Checklist.pdf OWASP应用安全渗透测试指南,列出OWASP最新有关于Web应用安全检测项清单,可针对日常渗透测试作为重要的执行参考依据 上传者:frxa126时间:2020-04-07 WEB应用渗透测试的步骤 WEB应用渗透测试的步骤 上传者:lubin136599时间:2011-12-28 ...
The Open Web Application Security Project (OWASP) - 一个开放软件安全社区 WebSec IO - 一个web安全社区资源 PHP书籍 PHP Books PHP相关的非常好的书籍 Functional Programming in PHP - 这本书将告诉你如何利用PHP5.3+的新功能的认识函数式编程的原则 Grumpy PHPUnit - 一本Chris Hartjes关于使用PHPUnit进行单元...