API-Security
see awesome-security
| API-Security | see awesome-security | |
|---|---|---|
| 15 | 13 | |
| 1,949 | 11,598 | |
| 1.7% | - | |
| 4.7 | 5.0 | |
| 21 days ago | 14 days ago | |
| Dockerfile | ||
| GNU General Public License v3.0 or later | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
API-Security
-
What's the problem with my API?
Check the top 10 API security by OWASP
-
Quick Privacy Question
In the end this is a security oversight known as excessive data exposure (OWASP - API3:2019) of Riot and as long as they keep sending this info people will be able to see it.
-
Implementing decent security
Check out ----, https://github.com/OWASP/API-Security
-
API without authentication severity?
If incorrect API authentication mechanisms implementation considered as Broken User Authentication, how severe the one without authentication at all? Critical? or high?
-
Feedbak for an article on API Security Maturity Model+
The OWASP top 10 API security risks are posted on their GitHub here. As OWASP shows, because APIs are open to the network:
-
API10:2019 - Insufficient Logging & Monitoring
More cases and prevention methods can be found on the OWASP API Security Top 10 official repository
- API9:2019 - Improper Assets Management
- API8:2019 - Injection
-
API7:2019 - Security Misconfiguration
OWASP API-Security repo
- API6:2019 - Mass Assignment
see awesome-security
-
Planning to buy the EC-Council 15 course bundle for Cybersecurity - Is it worth it?
Awesome lists - https://github.com/sbilly/awesome-security
- Cert path for a junior
- Cyber Security Resources for All Levels
-
Just getting started
https://github.com/sbilly/awesome-security https://github.com/Hack-with-Github/Awesome-Hacking
-
I need books to read
https://github.com/sbilly/awesome-security. Everything related to hacking you will prolly ever need.
- Anonymous hackers now targeting Russian websites in retaliation for the Ukraine invasion.
-
Finding entry-level SOC Analyst job
Awesome-security
- A collection of stuff about security
- Anyone in here with a liberal arts degree such as Poli Sci?
- I'm preparing for the interview and I've curated a list of resources that might be helpful for you also.
What are some alternatives?
API-Security-Checklist - Checklist of the most important security countermeasures when designing, testing, and releasing your API
wstg - The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
awesome-appsec - A curated list of resources for learning about application security
bugbounty-cheatsheet - A list of interesting payloads, tips and tricks for bug bounty hunters.
see awesome-ssh - :computer: A curated list of SSH resources.
Security_Engineer_Interview_Questions - Every Security Engineer Interview Question From Glassdoor.com
awesome-selfhosted - A list of Free Software network services and web applications which can be hosted on your own servers [Moved to: https://github.com/awesome-selfhosted/awesome-selfhosted]
offensiveinterview - Interview questions to screen offensive (red team/pentest) candidates
awesome-web-hacking - A list of web application security
Interview_Tips - Summary of Cyber Security interview questions I have been through, hope this helps