Segurança

Ataques

• Broken Access Control

• Broken Authentication

• Cross Site Scripting (XSS)

• Injection

• Insecure Deserialization

• Insufficient Logging Monitoring

• Security Misconfiguration

• Sensitive Data Exposure

• Using Components With Known Vulnerabilities

• XML External Entities (XXE)

Bibliotecas

• Advisor

• DependencyCheck

• NPM Audit

  • NPM Audit HTML

• Gitleaks

• Infisical

• Retire.js

Ferramentas

• Burp Suite

• CSRL Tester

• HCaptcha

• Nikto2

• Observatory Mozilla

• OWASP Zap

• Security Headers

• social-engineer-toolkit (SET)

• SSL Trust

• TypingDNA

• Virus Total

• zphisher

Links

• Firefox Monitor

• Haveibeenpwned

• OWASP

  • OWASP Zap

Pessoas

• Crackers

• Hackers

Plataformas

• Anchore

• Blumira

• BridgeCrew

• Doppler

• Otto

• Prisma Cloud

• Snyk

• SonarQube

  • Sonar Qube SAST

• Sysdig