@secureCodeBox

@OWASP project to make DevSecOps damn easy: https://xitter.cf/t.co/FDJwRXyBY2

 Germany
github.com/secureCodeBox/secureCodeBox
Joined November 2017
  • Tweets173
  • Following147
  • Followers152
6Media
.@secureCodeBox (SCB) - Continuous Secure Delivery Out Of The Box (via @KitPloit) buff.ly/3I1uuwm
3
4
secureCodeBox retweeted
Zed Attack Proxy@zaproxy5 Aug 2021
If you use ZAP then please fill in the ZAP Usage Questionnaire: docs.google.com/forms/d/e/1F… That includes using ZAP via 3rd parties like @StackHawk @DeepFactor_inc @GetAstra @secureCodeBox @purpleteamlabs @idyllumlabs @alertflex @GitLab @hostedscan @sken_ai @patrowl_io @nucleussec

OWASP Usage ZAP Questionnaire

This is a questionnaire for users of the OWASP Zed Attack Proxy: https://www.zaproxy.org/ There is just this one page of questions focused on helping us understand how people use ZAP. A summary of...

docs.google.com
1
18
3
23
Considering the increase in cyber attacks these days, the @OWASP Juice Shop InfoSec team made a bold move and doubled (✌️) our shop's security posture by changing the password length rule from 5-20 to 5-40 characters! 💪 Beat that, you black-hoodied script kiddies! 🧃
2
26
1
187
Mal was zu lachen: ittage.informatik-aktuell.de…
2
4
Use @secureCodeBox to prevent this: New Malware Hijacks Kubernetes Clusters to Mine Monero threatpost.com/new-malware-h…
1
1
You can use @secureCodeBox to do this: Getting Started with Security Testing: A Practical Guide for Startups thehackernews.com/2021/07/ge…
1
2
secureCodeBox retweeted
DefectDojo@defectdojo29 Jun 2021
.@DefectDojo version 2.0.0 has been published. View it at github.com/DefectDojo/django…. Thanks to all for your contributions! #defectdojo #vulnerabilitymanagement

Release 2.0.0 🌈 · DefectDojo/django-DefectDojo

Breaking changes We did some cleanups and removals of deprecated features hence the 2.0.0 major version bump. Please read the upgrade notes! Changes since 1.15.0 Release: Merge release into master...

github.com
15
21
secureCodeBox retweeted
ege
@egeblc2 Mar 2021
OMG !! Rumors are real😱😱 Immunity CANVAS 7.26 exploit pack is leaked. More than 800 1days and weaponized spectre exploit.
16
438
61
1,128
secureCodeBox retweeted
Zed Attack Proxy@zaproxy10 Feb 2021
New blog post: Automate checking @OWASP_ASVS controls using ZAP scripts zaproxy.org/blog/2021-02-10-… c/o @BlazingWindSec

Automate checking ASVS controls using ZAP scripts

Automate checking ASVS controls using ZAP scripts

zaproxy.org
25
1
49
If you missed a couple major releases of @owasp_juiceshop over the last year(s), then this recording of the @owasp_de #HamburgStammtisch virtual session from November will bring you back up to speed! youtu.be/AUhDItHHLiY

Juice Shop 12 (Virtual HH-MeetUp 24.11.2020)

In this virtual OWASP Hamburg-Stammtisch session, Björn Kimminich p...

youtube.com
7
8
How does a security professional respond to engineers who suggest Steve Gibson's SQRL algorithm for AuthN?
9
4
1
9
secureCodeBox retweeted
Tim Pritlove@timpritlove20 Nov 2020
DHCP-Server anno 1999 (Chaos Communication Camp)
13
15
172
Most of my talks are about defense. I'm not big into attack thinking other than the basics. Would anyone suggest a REALLY good speaker on how to think like an attacker from an AppSec point of view? Someone with a bit of flare is best...
13
8
16
secureCodeBox retweeted
Hacksplained@hacksplained4 Nov 2020
Replying to @Gerald_Auger @bkimminich
If people wanna have solutions for @owasp_juiceshop in video form, they can also check out youtube.com/playlist?list=PL…

How to hack OWASP Juice Shop - A Guided Walkthrough showing all Solutions

In this playlist, we are going over every single challenge of OWASP's juice shop together. This is a full guide and walkthrough which should help you masteri...

youtube.com
1
2
7
Sounds like an easy way towards Beyond Corp: hashicorp.com/blog/hashicorp…
1
Nice: Multi Device Support für @ThreemaApp threema.ch/de/blog/posts/md-…
1
I've released NAT Slipstreaming, a spooky new technique that allows an attacker to remotely access any TCP/UDP service bound to a victim machine, bypassing the victim’s NAT/firewall, just by the victim visiting a website. samy.pl/slipstream/ Happy Halloween!
142
1,834
434
4,999
[🤖] 30% off!?! We must be crazy! Use our #coupon code before we come to our senses: pes[CfFb7m (valid until 2020-11-30)
3
6
secureCodeBox retweeted
Daniel Fett@dfett422 Nov 2020
An effort to standardize a robust defense against #OAuth Mix-Up attacks: ietf.org/archive/id/draft-me…
2
7
17
Credential Stuffing vs Password Spraying blog.weltraumschaf.de/blog/C… #Security
1
1
Load more