dogear

enter for all results · esc to close

Security

5,347 items in 29 lists

  1. Source-free binary mutation for offense and defense api.semanticscholar.org

    (December 2014)

    site link ↗
  2. About anti-debug tricks anti-debug.checkpoint.com

    site link ↗
  3. ResourceHacker angusj.com

    Resource editor for 32bit and 64bit Windows applications.

    site link ↗
  4. SymPack amazon.com

    Safe, portable, largely effective but not generic library for packing detection and unpacking ; part of the Norton Antivirus solution.

    site link ↗
  5. Alternate EXE Packer alternate-tools.com

    Compression tool for executable files (type EXE) or DLL's relying on UPX 3.96.

    site link ↗
  6. Alienyze alienyze.com

    Advanced software protection and security for Windows 32-bit executables.

  7. LordPE aldeid.com

    PE header viewer, editor and rebuilder.

    site link ↗
  8. ImpREC aldeid.com

    This can be used to repair the import table for packed programs.

    site link ↗
  9. Efficient automatic original entry point detection airitilibrary.com

    (January 2019)

    site link ↗
  10. 20to4 20to4.net

    Executable compressor that is able to stuff about 20k of finest code and data into less than 4k.

    site link ↗
  11. Pandora's Bochs 0x0badc0.de

    Extension to the Bochs PC eumlator to enable it to monitor execution of the unpacking stubs for extracting the original code.

    site link ↗
  12. Periodic Table of DevOps Tools xebialabs.com

    XebiaLabs - A collection of DevSecOps tooling categorised by tool functionality.

  13. Alice and Bob Learn Application Security wiley.com

    Tanya Janca - An accessible and thorough resource for anyone seeking to incorporate, from the beginning of the System Development Life Cycle, best security practices in software development.

  14. Coding Standards wiki.sei.cmu.edu

    CERT - A collection of secure development standards for C, C++, Java and Android development.

  15. WeHackPuple wehackpurple.com

    WeHackPurple - Online courses that teach application security theory and hands-on technical lessons.

    site link ↗
  16. Threatspec threatspec.org

    Threatspec - Define threat modelling as code.

    site link ↗
  17. TAG Security tag-security.cncf.io

    Cloud Native Computing Foundation - TAG Security facilitates collaboration to discover and produce resources that enable secure access, policy control, and safety for operators, administrators, developers, and end-users across the cloud native ecosystem.

  18. Security Training for Everyone sudo.pagerduty.com

    Pager Duty - A presentation created and open-sourced by PagerDuty to provide security training employees.

    site link ↗
  19. Security Training for Engineers sudo.pagerduty.com

    Pager Duty - A presentation created and open-sourced by PagerDuty to provide security training to software engineers.

  20. Streamdal streamdal.com

    Streamdal - Embed privacy controls in your application code to detect and monitor PII as it enters and leaves your systems, preventing it from reaching unintended databases, data streams, or pipelines.

  21. Spectral DeepConfig spectralops.io

    Spectral - Find misconfiguration both in infrastructure as well as apps as early as commit time.

    site link ↗
  22. SpectralOps spectralops.io

    Spectral - Automated code security, secrets, tokens and sensitive data scanning.

    site link ↗
  23. DevSecOps: Making Security Central To Your DevOps Pipeline spacelift.io

    Spacelift - An article explains what DevSecOps aims to achieve, why it’s advantageous, and how the DevSecOps lifecycle looks.

  24. DevSecOps Podcast Series soundcloud.com

    OWASP - Discussions with thought leaders and practitioners to integrate security into the development lifecycle.

  25. Snyk Open Source snyk.io

    Snyk - Automated vulnerable dependency monitoring and upgrades using Snyk's dedicated vulnerability database.

  26. Snyk Container snyk.io

    Snyk - Scan Docker and Kubernetes applications for security vulnerabilities during CI/CD or via continuous monitoring.

  27. DevSecOps Hub snyk.io

    Snyk - Introduction to key DevSecOps concepts, processes and technologies.

  28. Sigstore sigstore.dev

    sigstore is a set of free to use and open source tools, including fulcio, cosign and rekor, handling digital signing, verification and checks for provenance needed to make it safer to distribute and use open source software.

  29. SD Elements securitycompass.com

    Security Compass - Identify and rank threats, generate actionable tasks and track related tickets.

    site link ↗
  30. SecureFlag secureflag.com

    OWASP - Hands-on secure coding training for Developers and Build/Release Engineers.

  31. Secure Code Warrior securecodewarrior.com

    Secure Code Warrior - Gamified and hands-on secure development training with support for courses, assessments and tournaments.

  32. CredScan secdevtools.azurewebsites.net

    Microsoft - A credential scanning tool that can be run as a task in Azure DevOps pipelines.

  33. Cloud Security and DevSecOps Best Practices and Securing Web Application Technologies (SWAT) Checklist sans.org

    SANS - A poster containing the Securing Web Application Technologies (SWAT) Checklist, SANS Cloud Security Curriculum, Cloud Security Top 10, Top 12 Kubernetes Threats, and Secure DevOps Toolchain.

  34. next page of items loading…