API-Security
Infosec_Reference
| API-Security | Infosec_Reference | |
|---|---|---|
| 15 | 10 | |
| 1,962 | 5,405 | |
| 1.5% | - | |
| 4.7 | 4.8 | |
| 8 days ago | 16 days ago | |
| Dockerfile | CSS | |
| GNU General Public License v3.0 or later | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
API-Security
-
What's the problem with my API?
Check the top 10 API security by OWASP
-
Quick Privacy Question
In the end this is a security oversight known as excessive data exposure (OWASP - API3:2019) of Riot and as long as they keep sending this info people will be able to see it.
-
Implementing decent security
Check out ----, https://github.com/OWASP/API-Security
-
API without authentication severity?
If incorrect API authentication mechanisms implementation considered as Broken User Authentication, how severe the one without authentication at all? Critical? or high?
-
Feedbak for an article on API Security Maturity Model+
The OWASP top 10 API security risks are posted on their GitHub here. As OWASP shows, because APIs are open to the network:
-
API10:2019 - Insufficient Logging & Monitoring
More cases and prevention methods can be found on the OWASP API Security Top 10 official repository
- API9:2019 - Improper Assets Management
- API8:2019 - Injection
-
API7:2019 - Security Misconfiguration
OWASP API-Security repo
- API6:2019 - Mass Assignment
Infosec_Reference
-
A slightly more fun way to disable windows defender. (through the WSC API)
There's multiple. Here is one I maintain, though am very behind on it.
https://github.com/rmusser01/Infosec_Reference
- How to improve documentation / technical writing skills?
- Manuals
-
Cybersecurity Repositories
Infosec Reference
- About Russia's Industrial Control System Attacks...
- Advise please?
- I'm preparing for the interview and I've curated a list of resources that might be helpful for you also.
-
Noob questions and advice
There’s this: https://github.com/rmusser01/Infosec_Reference
-
How to grt better/ homelab help
https://github.com/rmusser01/Infosec_Reference/blob/master/Draft/Building_A_Lab.md Has some ideas. The first things to decide on would be what do you want to use for your hosting environment. Do you want to run ESXi? HyperV? Xen? Something else? What do you want to learn? What sort of environments do you want to simulate?
- Cybersec Bootcamp
What are some alternatives?
API-Security-Checklist - Checklist of the most important security countermeasures when designing, testing, and releasing your API
wstg - The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
hackdroid - Security Apps for Android
bugbounty-cheatsheet - A list of interesting payloads, tips and tricks for bug bounty hunters.
red_team_attack_lab - Red Team Attack Lab for TTP testing & research
Security_Engineer_Interview_Questions - Every Security Engineer Interview Question From Glassdoor.com
the_cyber_plumbers_handbook - Free copy of The Cyber Plumber's Handbook - The definitive guide to Secure Shell (SSH) tunneling, port redirection, and bending traffic like a boss.
offensiveinterview - Interview questions to screen offensive (red team/pentest) candidates
AlanFramework - A C2 post-exploitation framework
Interview_Tips - Summary of Cyber Security interview questions I have been through, hope this helps