The Wayback Machine - http://web.archive.org/web/20200704023059/https://github.com/topics/security-automation
Skip to content
#

security-automation

Here are 264 public repositories matching this topic...

mkbhanda
mkbhanda commented Jan 8, 2019

Summary

Get URLs that have parameters, whether http or https, leak sensitive information when they capture parameters such as API-Keys, usernames, and passwords. Browser extensions, bookmarks, history, and server log files capture these, even when operating in anonymous mode. Browser providers could share the information and log files need to mask the sensitive information. Refer: https://ww

monkey
danielguardicore
danielguardicore commented Mar 26, 2020

Is your feature request related to a problem? Please describe.
Monkey Island should listen to port 80 and 443 (if not taken) and redirect clients to the correct Island port.

Describe alternatives you've considered
We don't want to move the Island to port 443 because that loses us a ATT&CK technique for uncommon port, but many users accidentally browse to default http/https.

immewnity
immewnity commented Apr 21, 2020

I'm just starting out in using DefectDojo, and am a bit confused on what the Tool Type and Tool Configuration sections inside Configuration. I know that documentation is something DefectDojo prides itself on, and I greatly appreciate the breadth of it... but I can't seem to find this documented anywhere.

kclinden
kclinden commented Apr 11, 2019

Description of problem:

I have never written SCAP content before, and am looking at how to get started. I would like to write SCAP content to test compliance on Photon OS against DISA SRGs. I have been all over the wiki pages, but I am still not sure how to get started. The main page makes it look super easy for writing OVAL and XCCDF files using YAML, but I am not sure where to build those

pacbot
ettermyra
ettermyra commented Oct 18, 2018

Just getting my bearings in the FACT code and perhaps I'm misinterpreting somethin but I'm wondering if common_helper_files is equivalent to helperFiles and also if get_dir_of_file() is equivalent to get_directory_of_current_file() in fileSystem? If so, I gather that the former are to be deprecated? If so, this should be documented.

The plugin template is well documented in its basics but metho

aarontp
aarontp commented Dec 13, 2018

Right now a lot of the logging from the tasks does not get propagated back to the user, so we should make sure that all of the tasks are adding logs and errors to the results so that at minimum the data gets put into the worker-log.txt. Ideally we would store this info in datastore so that the clients could query it later (this part is in #115).

pichlou
pichlou commented Jan 7, 2019

Hi
i am using docker-compose in windows 7
postgres,rabbitmq and django application services build,but nginx service has an error!

nginx:
volumes:
- ./nginx_docker.conf:/etc/nginx/conf.d/default.conf

in this part "nginx_docker.conf" is not a directory and i have error "not a directory" in running "docker-compose up" command.
what is your solution for my problem?

Improve this page

Add a description, image, and links to the security-automation topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the security-automation topic, visit your repo's landing page and select "manage topics."

Learn more

You can’t perform that action at this time.