-
Updated
Sep 10, 2021 - Python
appsec
Here are 158 public repositories matching this topic...
-
Updated
Sep 8, 2021 - Python
⭐ Challenge idea
Description
Several users originally missing security question answers - most notably bjoern.k
-
Updated
Sep 7, 2021 - Python
Merge /Testing_for_Vertical_Bypassing_Authorization_Schema_WSTG-AUTHZ-00X.md into 4-Web_Application_Security_Testing/05-Authorization_Testing/03-Testing_for_Privilege_Escalation.md
-
Updated
Jun 30, 2021 - Ruby
-
Updated
Apr 22, 2021 - Shell
The current swagger definition is autogenerated. The automatically generated definitions rely on reflection and annotations to create the documentation. The reflection capabilities are poor at best and lead to missing API parameters. Annotations can help in some cases, but the only fix for Swagger is to create individual POJOs for every possible request. This will lead to unnecessary large number
-
Updated
Jun 11, 2019
Authentication via Azure/aad-pod-identity for keyvault access could be a good feature to avoid use of clientId/ clientSecret in chart values. Don't you think ?
-
Updated
Sep 7, 2021 - HTML
-
Updated
Sep 10, 2021 - Open Policy Agent
I just finished dealing with auto-migrated issues for this article, it could definitely use some content updates:
https://github.com/OWASP/www-community/blob/master/pages/HttpOnly.md it still talks about old versions of IE and Opera.
This article includes an extensive table that needs re-working after the auto-migration as well (which I did not tackle).
Is Opera even relevant in 2020? Do
sim swapping
-
Updated
Sep 11, 2021 - Java
-
Updated
Aug 25, 2021
-
Updated
Oct 16, 2019 - Go
-
Updated
Jun 19, 2021 - Dockerfile
-
Updated
Sep 10, 2021 - HTML
-
Updated
Aug 7, 2020
rush.js build errors
Seeing the below error while installing rush.js. Probably might need a package in the base image. Any help would be appreciated.
#21 516.9 > [email protected] install /usr/local/lib/node_modules/@microsoft/rush/node_modules/keytar
#21 516.9 > prebuild-install || npm run build
#21 516.9
#21 521.6 prebuild-install WARN install No prebuilt binaries found (target=14.16.0 runtime=node arch=arm64
-
Updated
Jun 9, 2021
-
Updated
May 31, 2021 - Java
If HTTP sites (is not HTTPS ones) use the Access-Control-Allow-Origin header then the site will typically not work.
ZAP should automatically fix this header.
https://stackoverflow.com/questions/61940616/how-do-i-work-with-http-sites-using-the-hud-in-owasps-zap-proxy
-
Updated
Mar 6, 2021 - Python
-
Updated
Sep 4, 2021 - Scala
-
Updated
Mar 24, 2019 - Python
-
Updated
Jul 14, 2021 - Python
-
Updated
Aug 18, 2021 - JavaScript
-
Updated
Sep 23, 2020
Improve this page
Add a description, image, and links to the appsec topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the appsec topic, visit your repo's landing page and select "manage topics."
https://www.zaproxy.org/docs/desktop/addons/fuzzer/options/ does not seem to be in-sync with the current Fuzzer options dialog:
https://github.com/zaproxy/zap-extensions/blob/main/addOns/fuzz/src/main/javahelp/org/zaproxy/zap/extension/fuzz/resources/help/contents/options.html seems