paulbrodner

Open Web Application Security Project(OWASP)

attacks

vulnerabilities

automated tools

• Static Application Security Testing
• Dynamic Application Security Testing (DAST)
• OWASP Dependency-Check

2021 Top 10 CheatSheet

paulbrodner

TA Architect

• is
  • the highest testing technical authority on test automation side
  • a senior test role with a wide strategic scope
  • an influencer among engineers, a good ambasador to the business
  • is a leader (not a manager with other responsabilities)
  • someone who build business casess around how implementing automation will benefit the customer and improve business process

Key Accountabilities

paulbrodner

#!/usr/bin/python3

import requests, string

def login(char):
    response = requests.post(
        "http://natas15.natas.labs.overthewire.org/index.php",
        auth=("natas15", "AwWj0w5cvxrZiONgZ9J5stNVkmxdk39J"),
        headers={
            "Content-Type": "application/x-www-form-urlencoded",

paulbrodner

# based on https://docs.docker.com/engine/install/ubuntu/
sudo apt-get update
sudo apt-get install apt-transport-https ca-certificates curl software-properties-common
curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key add -
sudo add-apt-repository "deb [arch=amd64] https://download.docker.com/linux/ubuntu $(lsb_release -cs) stable"
sudo apt-get update

sudo apt-get install docker-ce

# call this as: 

paulbrodner

apiVersion: v1
kind: Template
metadata:
  creationTimestamp: null
  name: test
objects:
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:

paulbrodner

apiVersion: v1
kind: DeploymentConfig
metadata:
  name: hello-world-app
spec:
  replicas: 1
  selector:
    deploymentconfig: hello-world-app
  strategy:
    type: Recreate

paulbrodner

about

choose between already defined VPN connections and automatically logs in!

OS: tested on windows only

Pay attention that this script will focus the VPN dialog and type the password. If the focus is lost, the script can type and sent the password to active windows - so if you run the script -> don't click on other applications, use it with caution

prerequisites

• you need pyautogui installed:

paulbrodner

About

This project is ....

Structure

<generate with tree> and explain main folders

Prerequisites

paulbrodner

# search for a library
repoquery -l easy-rsa

paulbrodner

sudo useradd -m pbrodner
sudo passwd pbrodner
sudo usermod -aG admin pbrodner

sudo vim /etc/ssh/sshd_config 
# edit line 
"PasswordAuthentication" no to yes

sudo /etc/init.d/ssh restart