govtech-csg Goto Github PK

autowasp

BurpSuite Extension: A one-stop pen testing checklist and logger tool

biometric-authentication-android-app

This project aims to educate developers to implement secure local biometric authentication on Android devices

govtech-csg-xcg-dangerousfunctions

This package contains a Django application that nullifies the effects of unsafe Python or Django functions (e.g. os.system), and logs all invocations of dangerous functions by default.

govtech-csg-xcg-dangerousrequests

Package containing a Django app that protects your application against dangerous requests (SSRF).

govtech-csg-xcg-modelpermissions

Provides functionality to enforce permissions checks on users when they attempt to perform actions on a Django `Model` object (e.g. if a request accesses a view that tries to read a set of objects from the database).

govtech-csg-xcg-secretsmanager

Package that provides integration between Django and AWS Secrets Manager for the management of DB credentials (MySQL and PostgreSQL) and Django secret key.

govtech-csg-xcg-securefileupload

Django middleware to validate user file uploads, detect specially crafted media files with malicious intent and block them.

govtech-csg-xcg-securemodelpkid

Package that generates random primary keys for Django model objects to help prevent IDOR vulnerabilities.

govtech-csg-xcg-viewpermissions

Package that modifies Django's default behaviour such that all views are "private" by default (i.e. inaccessible to all, whether authenticated or not). Acts as an extra layer of defense against coding mistakes or misconfigurations.

paddingoraclehunter

proxyagent

security-advisories

stack-the-flags-2020

tsunami-security-scanner-plugins

This project aims to provide a central repository for many useful Tsunami Security Scanner plugins.

wstg

The Web Security Testing Guide is a comprehensive open source guide to testing the security of web applications and web services.

www-project-web-security-testing-guide

The Web Security Testing Guide (WSTG) Project produces the premier cybersecurity testing resource for web application developers and security professionals.