Professional-grade mypy configuration
Type hints are an essential part of modern Python. Type hints are the enabler for clever IDEs, they document the code, and even reduce unit testing needs. Most importantly, type hints make the code more robust and maintainable which are the attributes that every serious project should aim for. At Wolt we have witnessed the benefits of type hints, for example, in a web backend project which has 100
LDAP Ports Explained: Configuring Standard, StartTLS, And LDAPS Connections - ITU Online IT Training
Test Your Router - RouterSecurity.org
DNS Server Tests  top The topic of Testing Your DNS Servers has been moved to a new page. It explains DNS and lists multiple websites that report on the currently in effect DNS server(s). It is never obvious, yet it is critically important, to know whose DNS servers you are using. Firewall Testers  top Level setting: Every computing device on the Internet is assigned a number. Some have two number
DMARC ã‚’ãªã‚る㪠- å¼è·å£«ãƒ‰ãƒƒãƒˆã‚³ãƒ æ ªå¼ä¼šç¤¾ Creators’ blog
GmailãŒã€Œãƒ¡ãƒ¼ãƒ«é€ä¿¡è€…ã®ã‚¬ã‚¤ãƒ‰ãƒ©ã‚¤ãƒ³ã€ã‚’改訂ã—ã€ãªã‚Šã™ã¾ã—メールã¸ã®å¯¾ç–を強化ã™ã‚‹æ—¨ã‚’発表ã—ã¦ã„ã¾ã™ã€‚今ã¾ã§ã¯åŽŸå‰‡ã€ãªã‚Šã™ã¾ã—メール対ç–ã®æœ‰ç„¡ã«ã‹ã‹ã‚らãšã€ãƒ¡ãƒ¼ãƒ«ã¯ã„ã¡ãŠã†ã¯å±Šã„ã¦ã„ã¾ã—ãŸã€‚ã—ã‹ã—今後ã¯ã€ãªã‚Šã™ã¾ã—ã¨ã¿ãªã•ã‚ŒãŸãƒ¡ãƒ¼ãƒ«ã¯å±Šã‹ãªããªã‚‹æ–¹å‘ã«å‘ã‹ã„ã¤ã¤ã‚ã‚Šã¾ã™ã€‚ ãªã‚Šã™ã¾ã—メールã¨ã¿ãªã•ã‚Œãªã„よã†ã«ã™ã‚‹ãŸã‚ã«ã€ãƒ¡ãƒ¼ãƒ«é€ä¿¡è€…ã«ã¯ã€ã€Œãƒ¡ãƒ¼ãƒ«é€ä¿¡ãƒ‰ãƒ¡ã‚¤ãƒ³èªè¨¼ã€ã¸ã®å¯¾å¿œãŒæ±‚ã‚られã¾ã™ã€‚メールé€ä¿¡ãƒ‰ãƒ¡ã‚¤ãƒ³èªè¨¼ã®æŠ€è¡“ã«ã¯ã€ä¸»ã«ä»¥ä¸‹ã®3ã¤ãŒã‚ã‚Šã¾ã™ã€‚ SPF: Sender Policy Framework (RFC 7208) DKIM: DomainKeys Identified Mail (RFC 6376) DMARC: Domain-based Message Authentication, Reporting, and Conformance (RFC 7489) SPFã¯å¾“æ¥
Introduction | The Hacker Recipes
This project is aimed at providing technical guides on various hacking topics. The most advanced topics are Active Directory and Web services. Other topics will be added. The ultimate goal is centralize all hacking techniques 👀 Cheatsheets are huge resources, but they sometimes lack simplicity or on the contrary they don't give enough context or explanation. This is not a cheatsheets project. Eve
スタートアップä¼æ¥ã§å§‹ã‚ã‚‹AWSã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç– ï½žå†…éƒ¨çµ±åˆ¶ã®è¦³ç‚¹ã‹ã‚‰ï½ž / AWS Security and Internal Audit at a Startup
「Security-JAWSã€ç¬¬27回】ã€ã§ç™ºè¡¨ã—ãŸè³‡æ–™ã§ã™ã€‚ https://s-jaws.doorkeeper.jp/events/146327 「クラウドセã‚ュリティエンジニアブãƒã‚°ã€ Security-JAWSã€ç¬¬27回】ã§ã€Œã‚¹ã‚¿ãƒ¼ãƒˆã‚¢ãƒƒãƒ—ä¼æ¥ã§å§‹ã‚ã‚‹AWSã‚»ã‚ュリティ対ç–　～内部統制…
Amazon S3ã®è„†å¼±ãªåˆ©ç”¨ã«ã‚ˆã‚‹ã‚»ã‚ュリティリスクã¨å¯¾ç– - Flatt Security Blog
ã¯ã˜ã‚ã« ã“ã‚“ã«ã¡ã¯ã€æ ªå¼ä¼šç¤¾Flatt Security ã‚»ã‚ュリティエンジニアã®æ£®å²¡(@scgajge12)ã§ã™ã€‚ 本稿ã§ã¯ã€Amazon S3 ã®è„†å¼±ãªä½¿ã„æ–¹ã«ã‚ˆã‚‹ã‚»ã‚ュリティリスクã¨å¯¾ç–を解説ã—ã€å®Ÿéš›ã®è¨å®šä¸å‚™ãªã©ã«é–¢ã™ã‚‹äº‹ä¾‹ã«ã¤ã„ã¦ã‚‚紹介ã—ã¾ã™ã€‚ Flatt Security ã¯å°‚門家ã®è¦–点ã§ã‚»ã‚ュリティリスクを調査ã™ã‚‹ã‚»ã‚ュリティ診æ–ã‚’æä¾›ã—ã¦ã„ã¾ã™ã€‚クラウドã¨ã‚¢ãƒ—リケーションã®ç·åˆçš„ãªè¨ºæ–ã®äº‹ä¾‹ã¨ã—㦠SmartHR 様ã®è¨ºæ–事例ãŒã”ã–ã„ã¾ã™ã®ã§ã€æ˜¯éžã‚¤ãƒ³ã‚¿ãƒ“ュー記事をã”覧ãã ã•ã„。GCP ã®äº‹ä¾‹ã§ã™ãŒã€ã‚‚ã¡ã‚ん今回å–り上ã’ã‚‹ AWS ã§ã‚‚åŒæ§˜ã®è¨ºæ–ãŒå¯èƒ½ã§ã™ã€‚ ã¯ã˜ã‚ã« Amazon S3 ã¨ã¯ ãƒã‚±ãƒƒãƒˆãƒ»ã‚ªãƒ–ジェクト ãƒã‚±ãƒƒãƒˆ オブジェクト アクセスãƒãƒªã‚·ãƒ¼ ãƒã‚±ãƒƒãƒˆãƒãƒªã‚·ãƒ¼ アクセスコントãƒãƒ¼ãƒ«ãƒªã‚¹ãƒˆ(ACL) IAM ãƒãƒªã‚·ãƒ¼ ç½²å付ã URL Amazon S3 ã«
LZone Cheat Sheets | LZone
A collection of helpful DevOps cheat sheets
SPF ã®ãƒ¬ã‚³ãƒ¼ãƒ‰ã¯å¢—ã‚„ã•ãªã„ã§ãã ã•ã„ | ãŠã‚‹ã¨ã®ãƒšãƒ¼ã‚¸
åŒä¸€ã®ãƒ‰ãƒ¡ã‚¤ãƒ³åã«å¯¾ã—㦠2 ã¤ã® SPF (TXT) レコードãŒã‚り，よã見るã¨ä¸€æ–¹ã¯ç‰‡æ–¹ã« include: amazon.com を付ã‘åŠ ãˆãŸã‚‚ã®ã¨ãªã£ã¦ã„ã¾ã™ï¼Ž 何ãŒãƒ€ãƒ¡? ã“ã®ä»¶ã«é–¢ã—ã¦ã¯å¤§ãã 2 点ダメãªç‚¹ãŒã‚ã‚Šã¾ã™ï¼Ž 1 点目ã¯ãƒ€ãƒ¡ãªç‚¹ã¨è¨€ã†ã‚ˆã‚Šè¬Žãªç‚¹ã§ã™ãŒï¼Œamazon.com 自身㌠amazon.com ã‚’ include ã—ã¦ãŠã‚Šï¼Œç„¡é™ãƒ«ãƒ¼ãƒ—ãŒç™ºç”Ÿã—ã¦ã„る点ã§ã™ï¼Ž include ã¯åˆ¥ã®ãƒ‰ãƒ¡ã‚¤ãƒ³åã«è¨˜è¼‰ã—㟠spf レコードをãã®ã¾ã¾å–り入れる形ã§åˆ©ç”¨ã—ãŸã„å ´åˆã«ä½¿ã†ã‚‚ã®ã§ï¼Œ ãã®ãƒ‰ãƒ¡ã‚¤ãƒ³å自身を include ã™ã‚‹æ„味ã¯ã‚ã‚Šã¾ã›ã‚“． ãªãŠï¼Œinclude: ã®ã†ã—ã‚ã«ã‚¹ãƒšãƒ¼ã‚¹ãŒå…¥ã£ã¦ã„ã‚‹ã®ã‚‚余分ã§ã™ï¼Ž 2 点目ãŒæœ¬é¡Œã§ã™ãŒï¼ŒSPF を記載ã—㟠TXT レコード㌠2 件ã‚ã‚‹ã“ã¨ã§ã™ï¼Ž IETF RFC 7208 Section 3.2 ã§ã¯è¤‡æ•°ã® DNS レコー
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
GitHub - IBM/tls-vuln-cheatsheet: A quick reference for understanding the nature and severity of vulnerabilities in TLS configurations and implementations.
Router Security
GitHub - haozibi/httpbee: Fake HTTP Server
GitHub - StefanGrimminck/zgrab2-configurations: A repository for possible zgrab2 configurations
Internet Hygiene Portal
Discovering Domains via a Time-Correlation Attack on Certificate Transparency
How to prevent origin server IP address behind CDN from exposed, like Cloudflare?
What is UPnP Port Forwarding? | QNAP Blog
Sources for APT Groups and Operations Search Engine | Gist
Gitlab Reconnaissance Introduction · Embrace The Red
Active Directory Enumeration: RPCClient - Hacking Articles
{{#tags}}- {{label}}
{{/tags}}