OWASP Top 10 - I have just completed this room! Check it out: tryhackme.com/room/owasptop10 10 Authentication Data Exposure External Entity Access Control Misconfiguration -site Scripting Deserialization Logging with Known Vulns via @RealTryHackMe

#tryhackme #owasp #top #injection #broken #sensitive #xml #security #cross #insecure #insufficent #monitoring #components #web #OWASPTOP10

Last updated 2 years ago

Ryan :donor:​ · @chmod777
171 followers · 252 posts · Server infosec.exchange

Today's THM Advent of Cyber challenge was a quick one but one that shouldn't be overlooked.

The challenge itself was pretty easy, but it's a good reminder that there are still a lot of websites and web applications that are poorly built and open to vulnerabilities.

I was listening to Darknet Diaries episode 2 on my commute yesterday and that talked about the VTech breach in 2015. The hacker was able to easily gain access because of garbage security.




#adventofcyber2022 #tryhackme #OWASPTOP10 #darknetdiaries

Last updated 2 years ago

Evodefense · @evodefense
33 followers · 17 posts · Server infosec.exchange
Evodefense · @evodefense
33 followers · 17 posts · Server infosec.exchange
Andy Tinkham · @andytinkham
130 followers · 350 posts · Server infosec.exchange

Thinking about ways to incorporate the OWASP Kubernetes Top 10 into our security culture today.

github.com/OWASP/www-project-k

#OWASPTOP10 #kubernetes #appsec

Last updated 2 years ago

CIRCL - Old account · @circl
117 followers · 607 posts · Server mastodon.opencloud.lu

We recorded a quick walk through of the code showing how messed up and why the exploit works.
youtu.be/msslpqyf98c  (first tweet had the url missing)

#OWASPTOP10 #IRisfun #codinglikeitsthe90s #iperl #cve201919781 #citrix #CitrixADC

Last updated 5 years ago