Programming
Software development: programming languages, coding, libraries and frameworks, software engineering and architecture, source control, developer tools, databases, and infrastructure.
-
Coding Standards wiki.sei.cmu.edu
CERT - A collection of secure development standards for C, C++, Java and Android development.
-
TAG Security tag-security.cncf.io
Cloud Native Computing Foundation - TAG Security facilitates collaboration to discover and produce resources that enable secure access, policy control, and safety for operators, administrators, developers, and end-users across the cloud native ecosystem.
-
Security Training for Engineers sudo.pagerduty.com
Pager Duty - A presentation created and open-sourced by PagerDuty to provide security training to software engineers.
-
Streamdal streamdal.com
Streamdal - Embed privacy controls in your application code to detect and monitor PII as it enters and leaves your systems, preventing it from reaching unintended databases, data streams, or pipelines.
-
DevSecOps: Making Security Central To Your DevOps Pipeline spacelift.io
Spacelift - An article explains what DevSecOps aims to achieve, why it’s advantageous, and how the DevSecOps lifecycle looks.
-
DevSecOps Podcast Series soundcloud.com
OWASP - Discussions with thought leaders and practitioners to integrate security into the development lifecycle.
-
Snyk Open Source snyk.io
Snyk - Automated vulnerable dependency monitoring and upgrades using Snyk's dedicated vulnerability database.
-
Snyk Container snyk.io
Snyk - Scan Docker and Kubernetes applications for security vulnerabilities during CI/CD or via continuous monitoring.
-
DevSecOps Hub snyk.io
Snyk - Introduction to key DevSecOps concepts, processes and technologies.
-
Sigstore sigstore.dev
sigstore is a set of free to use and open source tools, including fulcio, cosign and rekor, handling digital signing, verification and checks for provenance needed to make it safer to distribute and use open source software.
-
SecureFlag secureflag.com
OWASP - Hands-on secure coding training for Developers and Build/Release Engineers.
-
Secure Code Warrior securecodewarrior.com
Secure Code Warrior - Gamified and hands-on secure development training with support for courses, assessments and tournaments.
-
CredScan secdevtools.azurewebsites.net
Microsoft - A credential scanning tool that can be run as a task in Azure DevOps pipelines.
-
SANS - A poster containing the Securing Web Application Technologies (SWAT) Checklist, SANS Cloud Security Curriculum, Cloud Security Top 10, Top 12 Kubernetes Threats, and Secure DevOps Toolchain.
-
Fundamental Practices for Secure Software Development safecode.org
SAFECode - Guidelines for implementing key secure development practices throughout the SDLC.
-
Requires.io requires.io
Olivier Mansion & Alexis Tabary - Automated vulnerable dependency monitoring and upgrades for Python projects.
-
Renovate renovate.whitesourcesoftware.com
WhiteSource - Automatically monitor and update software dependencies for multiple frameworks and languages using a CLI or git repository apps.
-
Practical DevSecOps practical-devsecops.com
Practical DevSecOps - Learn DevSecOps concepts, tools, and techniques from industry experts with practical DevSecOps using state of the art browser-based labs.
-
BurpSuite Enterprise Edition portswigger.net
PortSwigger - BurpSuite's web application vulnerability scanner used widely by penetration testers, modified with CI/CD integration and continuous monitoring over multiple web applications.
-
Proactive Controls owasp.org
OWASP - OWASP's list of top ten controls that should be implemented in every software development project.
-
Secure Coding Practices Quick Reference Guide owasp.org
OWASP - A checklist to verify that secure development standards have been followed.
-
The Secure Developer mydevsecops.io
Snyk - Discussion about security tools and best practices for software developers.
-
Secure Development Lifecycle microsoft.com
Microsoft - A collection of tools and practices that serve as a framework for the secure development lifecycle.
-
Kubescape kubescape.io
Cloud Native Computing Foundation - An open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters.
-
SecureFlag Knowledge Base knowledge-base.secureflag.com
OWASP - A repository of information about software vulnerabilities and how to prevent them.
-
Docker Secrets docs.docker.com
Docker - Store and manage access to secrets within a Docker swarm.
-
Deep Dive discotek.ca
Discotek.ca - Static analysis for JVM deployment units including Ear, War, Jar and APK.
-
Secure Software Development Framework csrc.nist.gov
NIST - A framework consisting of practices, tasks and implementation examples for a secure development lifecycle.
-
Building Security In Maturity Model (BSIMM) bsimm.com
Synopsys - A framework for software security created by observing and analysing data from leading software security initiatives.
-
AppSec Day appsecday.io
OWASP - An Australian application security conference run by OWASP.
-
Semgrep Academy academy.semgrep.dev
Semgrep - Free, on-demand courses covering topics including API security, secure coding and application security.
-
SafeStack academy.safestack.io
SafeStack - Security training for software development teams, designed to be accessible to individuals and small teams as well as larger organisations.
-
Absolute AppSec absoluteappsec.com
Seth Law & Ken Johnson - Discussions about current events and specific topics related to application security.
-
Database Triggers as Persistence Mechanisms trustwave.com
An in-depth write up about database triggers providing persistence.
-
OWASP Embedded Application Security Project owasp.org
Development best practices and list of hardware and software tools.
-
OpenOCD openocd.org
Free and Open On-Chip Debugging, In-System Programming and Boundary-Scan Testing.
-
BladeRF 2.0 nuand.com
Software Defined Radio peripheral capable of transmission or reception of radio signals from 47 MHz to 6 GHz (full-duplex).
-
HydraBus hydrabus.com
Open source multi-tool hardware similar to the BusPirate but with NFC capabilities.
-
-
UberTooth One greatscottgadgets.com
Open source 2.4 GHz wireless development platform suitable for Bluetooth experimentation.
-
-
IoTSecFuzz gitlab.com
Framework for automatisation of IoT layers security analysis: hardware, software and communication.
-
USRP B Series ettus.com
Software Defined Radio peripheral capable of transmission or reception of radio signals from 70 MHz to 6 GHz (full-duplex).
-
LimeSDR crowdsupply.com
Software Defined Radio peripheral capable of transmission or reception of radio signals from 100 KHz to 3.8 GHz (full-duplex).
-
Router Passwords 192-168-1-1ip.mobi
Default login credential database sorted by manufacturer.
-
-
-
-
-
- next page of items loading…
