The Web Security Testing Guide in short WSTG is an open-source project by OWASP Foundation that produces cybersecurity testing resources for web application developers, security professionals, or penetration testers.
WSTG is a comprehensive guide to test the security of web applications, and web services. It provides a framework of best practices used by penetration testers, and organizations across the globe.
The OWASP Testing Project
The motive of this project is to help tech guys or other people to understand how, and W4 (what, why, when, where) of testing the web applications, and services.
The Testing Guide describes the general testing framework and techniques required…
“I’m just frustrated completely, The colleges are just preparing and pushing me for the Degree, An A4 size paper may be, hardcoded my name, and having some high profile signatures. What is it actually? What I am getting and What I achieved so far and What I’ll achieve with it. The institutes are business? Okay! I’ll try to go to my nearest Training center to learn Technology, Really? This I’ve earned so far for what I’ve invested a lot. I’m a so-called Engineer. I have a great Bio on My Instagram & getting many followers weekly because I’m an engineer…
Ansible, A powerful IT automation tool as well as the revolutionary invention of the Industry. It can solve almost every task and can reduce time complexity by running a single task on thousands of machines simultaneously. According to Wikipedia “Ansible is an open-source software provisioning, configuration management, and application-deployment tool enabling infrastructure as code. It runs on many Unix-like systems and can configure both Unix-like systems as well as Microsoft Windows.
Another terminology we need to understand is “Ansible Tower”. The Ansible Tower can centralize and control IT infrastructure with a visual dashboard, role-based access control, job scheduling, integrated notifications…
Technology… It’s not a field, It’s a great feeling. In Today’s world, we can see the changes in Technological things rapidly. Now, instead of writing code, we can do almost every task even machine learning very easily with the help of pre-created tools and technology. That’s a very interesting and good thing. But, what if you and I and others want to create the technology instead of using it. I am talking about being the creator of Technology. As a creator, you and I and others need to understand or explore the right concept of technological things. That means, How…
Before getting started? First, let me tell you the concept “CLI”. The CLI stands for Command Line Interface which allows users to directly interact with the particular program or system using “Black Screen”. Black Screen is also known as “Shell”. It prompt user to input something or commands to do some operations. The AWS Command Line Interface (CLI) is a unified tool to manage AWS services. With just one tool to download and configure, you can control multiple AWS services from the command line and automate them through scripts.
Installation of Amazon Web Services Command Line Interface (AWS CLI) 2
The AWS Command Line Interface has two different versions: 1 &…
Previous Article of #WSTGExplained: What is OWASP Web Security Testing Guide?
Principles of Testing
There are some common misconceptions when developing a testing methodology to find security bugs and vulnerabilities in software.
OWASP Says
“There Is No Silver Bullet”
While it is tempting to think that a security or vulnerability scanner or application firewall will provide many defenses against attack or identity a multitude of problems, in reality, there is no silver bullet to the problem of insecure software.
The Application Security assessment software useful as a first pass to find the low-hanging fruit is generally immature and ineffective at in-depth assessment or providing sufficient test coverage.
Security…
For Me: Success is the conclusion of the experiments, struggles, failures, and 360 experiences of everything in our life. Success is satisfaction, and it is not considered if your success is copied or inspired by or from someone or something. Your Failure is your success when you agree with the fact that at least “YOU DID SOMETHING”
Your movement, your decision, your efforts, your 0 to 1 is the actual success before the Success the world wants to see.
Sharing my 3 rules of life for survival.
1. “If you want to do something, just announce it and don’t be…
Thinking about making your career in IT & InfoSec? Wants to know what other professionals and public figures think about having a Degree or Not?
What people think about?
Let’s see what professionals are saying on Twitter
What Wesley Thijs aka the XSS Rat says
the XSS Rat on Twitter: — twitter.com
“Degree is important to gain a work ethic :) the workplace won’t treat you any kinder than school, on the opposite, bye bye free time if you want to be good”
the Phillip Wylie, Founder of The Innocent Lives Foundation says
Phillip Wylie on Twitter: — twitter.com
“It is not a requirement…
