Security
5,347 items in 29 lists
-
Dependency-Check owasp.org
OWASP - Scans dependencies for publicly disclosed vulnerabilities using CLI or build server plugins.
-
Secure Coding Practices Quick Reference Guide owasp.org
OWASP - A checklist to verify that secure development standards have been followed.
-
Nightfall nightfall.ai
Nightfall - A web-based platform that monitors for sensitive data disclosure across several SDLC tools, including GitHub repositories.
-
The Secure Developer mydevsecops.io
Snyk - Discussion about security tools and best practices for software developers.
-
Threat Modelling Tool microsoft.com
Microsoft - Threat model diagramming tool.
-
Secure Development Lifecycle microsoft.com
Microsoft - A collection of tools and practices that serve as a framework for the secure development lifecycle.
-
Kubescape kubescape.io
Cloud Native Computing Foundation - An open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters.
-
SecureFlag Knowledge Base knowledge-base.secureflag.com
OWASP - A repository of information about software vulnerabilities and how to prevent them.
-
JFrog XRay jfrog.com
JFrog - Security and compliance analysis for artifacts stored in JFrog Artifactory.
-
IriusRisk iriusrisk.com
IriusRisk - Draw threat models and capture threats and countermeasures and manage risk.
-
SecuriCAD foreseeti.com
Forseeti - Treat modelling and attack simulations for IT infrastructure.
-
NPM Audit docs.npmjs.com
NPM - Vulnerable package auditing for node packages built into the npm CLI.
-
Docker Secrets docs.docker.com
Docker - Store and manage access to secrets within a Docker swarm.
-
Ansible Vault docs.ansible.com
Ansible - Securely store secrets within Ansible pipelines.
-
Deep Dive discotek.ca
Discotek.ca - Static analysis for JVM deployment units including Ear, War, Jar and APK.
-
DevSecCon devseccon.com
Snyk - A community that runs conferences, a blog, a podcast and a Discord dedicated to DevSecOps.
-
Dependency-Track dependencytrack.org
OWASP - Monitor the volume and severity of vulnerable dependencies across multiple projects over time.
-
CyberArk Application Access Manager cyberark.com
CyberArk - Secrets management for applications including secret rotation and auditing.
-
Secure Software Development Framework csrc.nist.gov
NIST - A framework consisting of practices, tasks and implementation examples for a secure development lifecycle.
-
Csper csper.io
Csper - A set of Content Security Policy tools that can test policies, monitor CSP reports and provide metrics and alerts.
-
Google Cloud Key Management Service (KMS) cloud.google.com
Google Cloud Platform - Securely store secrets within GCP.
-
Building Security In Maturity Model (BSIMM) bsimm.com
Synopsys - A framework for software security created by observing and analysing data from leading software security initiatives.
-
BeerSecOps blog.aquasec.com
Aqua Security - Breaking down the silos of Dev, Sec and Ops, discussing topics that span these subject areas.
-
Azure Key Vault azure.microsoft.com
Microsoft Azure - Securely store secrets within Azure.
-
AWS Secrets Manager aws.amazon.com
Amazon AWS - Securely store retrievable application secrets in AWS.
-
AppSec Day appsecday.io
OWASP - An Australian application security conference run by OWASP.
-
Semgrep Academy academy.semgrep.dev
Semgrep - Free, on-demand courses covering topics including API security, secure coding and application security.
-
SafeStack academy.safestack.io
SafeStack - Security training for software development teams, designed to be accessible to individuals and small teams as well as larger organisations.
-
Absolute AppSec absoluteappsec.com
Seth Law & Ken Johnson - Discussions about current events and specific topics related to application security.
-
StackSmashing youtube.com
Reverse engineering and hardware hacking of embedded devices.
-
Flashback Team youtube.com
A duo of hackers explaining their step by step approach to finding and exploiting vulnerabilities in embedded devices.
-
wrong baud wrongbaud.github.io
-
The Art of PCB Reverse Engineering visio-for-engineers.blogspot.com
-
-
-
Hardware Security: Design, Threats, and Safeguards taylorfrancis.com
-
The SRecord package srecord.sourceforge.net
Collection of tools for manipulating EPROM files (can convert lots of binary formats).
-
Siliconpr0n siliconpr0n.org
A Wiki/Archive of all things IC reversing.
-
Abusing the Internet of Things: Blackouts, Freakouts, and Stakeouts shop.oreilly.com
-
J-Link segger.com
J-Link offers USB powered JTAG debug probes for multiple different CPU cores :euro:.
-
Saleae saleae.com
Easy to use Logic Analyzer that support many protocols :euro:.
-
-
-
-
RTL-SDR rtl-sdr.com
-
Embedded Device Vulnerability Analysis Case Study Using Trommel resources.sei.cmu.edu
-
Proxmark 3 RDV4 proxmark.com
Powerful general purpose RFID tool. From Low Frequency (125kHz) to High Frequency (13.56MHz) tags.
-
Pwning the Dlink 850L routers and abusing the MyDlink Cloud protocol pierrekim.github.io
-
Multiple vulnerabilities found in the D-link DWR-932B pierrekim.github.io
-
PenTestPartners pentestpartners.com
- next page of items loading…
