RaKKeN

Information Security Information From Web.

Index

• WebAppSec

  • OWASP Top 10 - Web (2021)
  • OWASP Top 10 - Web (2017)
  • OWASP Top 10 - API (2019)
  • OWASP Top 10 - Mobile (2016)
  • Handling User Access
  • Handling User Input
  • Handling Attackers
  • HTTP Protocol
    • HTTP Requests/Responses
    • HTTP Methods
    • URL
    • HTTP Headers (Request Headers, Response Headers, Secure Headers)
    • Cookies
    • Status Codes
    • HTTPS
    • HTTP Authentication
  • Same-Origin Policy
  • Encoding Schemes
  • CIA - Confidentiality, Integrity, Availability
  • AAA - Authentication, Authorization, Accountability
  • Authentication vs Authorization
  • Well-Known Common Protocols
  • Vulnerability, Threat, Risk & Attack
  • Type Of Injection Attack

• Networking

  • TCP vs UDP
  • Types Of Servers

• Thick Client

  • Thick Client Usefull Link
  • Thick Client Approch 1
  • Thick Client Approch 2

• Mobile (Android/iOS)

  • Android Application Test Plan
  • iOS Application Usefull Link (infosecinstitute)
  • Mobile Application Penetration Testing Checklist
  • Android Penetration Testing Tools for Pentesters & Security Professionals
  • Harsh Bothra - Learn365
  • Anubhav Singh - Android

• Tool's

  • MobSF
  • gdown
  • Megabasterd

• Command's

  • mkdir

• Contributors

[!WARNING]

This repository is intended solely for educational purposes, security research, and authorized penetration testing. Use the techniques, tools, and test cases only on systems or applications for which you have explicit written authorization. Unauthorized testing is illegal and unethical. The author assumes no responsibility for any misuse, unauthorized activities, or damage resulting from the use of the information provided in this repository.