Skip to content

Instantly share code, notes, and snippets.

View patrickceg's full-sized avatar

Patrick Santos patrickceg

View GitHub Profile
@patrickceg
patrickceg / wstg583.md
Last active April 5, 2021 19:53
wstg583.md

For OWASP/wstg#583

Documents with captures and requests:

HTTP responses OK document\4-Web_Application_Security_Testing\01-Information_Gathering\02-Fingerprint_Web_Server.md

Curl and HTTP responses OK document\4-Web_Application_Security_Testing\01-Information_Gathering\03-Review_Webserver_Metafiles_for_Information_Leakage.md

This is my scratchpad for https://github.com/OWASP/wstg/issues/419
Location of the article in question https://github.com/OWASP/wstg/blob/master/document/4-Web_Application_Security_Testing/04-Authentication_Testing/01-Testing_for_Credentials_Transported_over_an_Encrypted_Channel.md
Summary all in all looks good, but we should reference https://github.com/OWASP/wstg/blob/master/document/4-Web_Application_Security_Testing/06-Session_Management_Testing/02-Testing_for_Cookies_Attributes.md#httponly-attribute
--------------------------
Questions:
@patrickceg
patrickceg / wstg224.txt
Last active February 16, 2020 21:15
OWASP WSTG Scratchpad
For https://github.com/OWASP/wstg/issues/224
-----------------------------
Rewrite Layout
-----------------------------
# Testing for Format String
## Summary
@patrickceg
patrickceg / install.sh
Last active March 24, 2020 02:08 — forked from mimura1133/install.sh
Enhanced Session for Kali Linux.
#!/bin/bash
# Original : https://raw.githubusercontent.com/Microsoft/linux-vm-tools/master/arch/install-config.sh
###############################################################################
# Update our machine to the latest code if we need to.
#
if [ "$(id -u)" -ne 0 ]; then
echo 'This script must be run with root privileges' >&2
exit 1