Серия туториалов по различным видам хака и набор сорцов эксплойтов от эксперта Ruben Boonen (aka b33f).

Источник
Эксплойт библиотека

#useful #pentest

Infrastructure Penetration Testing Checklist

#docs #pentest

OWASP Top 10 for Large Language Model Applications

Throughout this article, we will examine how vulnerabilities such as data leakage, unauthorized code execution, inadequate access controls, and more can manifest in the context of LLM applications. We will also explore the specific techniques and attack vectors that malicious actors may employ to exploit LLMs and compromise their security.

By understanding the OWASP Top 10 vulnerabilities and their implications in the context of LLMs, we can take proactive steps to fortify our systems and protect sensitive information, user privacy, and the overall integrity of our applications.

Contents:
LLM01:2023 - Prompt Injections
LLM02:2023 - Data Leakage
LLM03:2023 - Inadequate Sandboxing
LLM04:2023 - Unauthorized Code Execution
LLM05:2023 - SSRF Vulnerabilities
LLM06:2023 - Overreliance on LLM-generated Content
LLM07:2023 - Inadequate AI Alignment
LLM08:2023 - Insufficient Access Controls
LLM09:2023 -g LLM10:2023 - Training Data Poisoning

CISSP Cheat Sheet

#docs #useful #management

Web Security: Learning HTTP Security Headers, Liran Tal, 2023

18 Lessons, 8 Quizzes, 30 Code Snippets, and 19 Illustrations to help you learn

Takeaway Skills
(+) Secure web applications using HTTP security headers
(+) Understand Content Security Policy
(+) Setup Node.js web applications securely
(+) Learn how to test and monitor for security headers and vulnerable JavaScript libraries
(+) Roadmap for future web controls

For each HTTP security header that can enhance your web application security, you'll learn what is the overall risk of not implementing it, and what does a proposed solution help with. Finally, you'll learn how to implement and configure the security header with Helmet, a popular and well-maintained Node.js package on npm.

#book #web #AppSec