Hacker News
- Open Web Application Security Project https://www.owasp.org/index.php/Main_Page 2 comments
- Certificate and Public Key Pinning https://www.owasp.org/index.php/Certificate_and_Public_Key_Pinning 3 comments
- Authentication Cheat Sheet https://www.owasp.org/index.php/Authentication_Cheat_Sheet 150 comments
- OWASP Testing Guide 2014 https://www.owasp.org/index.php/OWASP_Testing_Guide_v4_Table_of_Contents 5 comments
- OWASP Top Ten Web Vulnerabilities https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project 30 comments
- OWASP Cheat Sheet Series https://www.owasp.org/index.php/Cheat_Sheets 27 comments
- XSS Prevention Cheat Sheet http://www.owasp.org/index.php/XSS_(Cross_Site_Scripting)_Prevention_Cheat_Sheet 22 comments
- Top-10 Web Application Security Vulnerabilities (2007) http://www.owasp.org/index.php/Top_10_2007 10 comments
- XSS (Cross Site Scripting) Prevention Cheat Sheet - OWASP http://www.owasp.org/index.php/XSS_(Cross_Site_Scripting)_Prevention_Cheat_Sheet 2 comments
Lobsters
- Regular expression Denial of Service https://www.owasp.org/index.php/Regular_expression_Denial_of_Service_-_ReDoS 2 comments compsci
- KeyBox: Web-Based SSH Access and Key Management https://www.owasp.org/index.php/OWASP_KeyBox 3 comments devops , linux
- Static Application Security Testing (SAST) for Rust Lang https://www.owasp.org/index.php/Source_Code_Analysis_Tools 4 comments rust
- Jenkins: Parse HTML report and fail build based on criteria https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project 7 comments devops
- How can SQL injection be prevented? https://www.owasp.org/index.php/SQL_Injection_Prevention_Cheat_Sheet#Primary_Defenses 4 comments learnprogramming
- OWASP Vulnerable Web Applications Directory Project/Pages/VMs https://www.owasp.org/index.php/owasp_vulnerable_web_applications_directory_project/pages/vms 3 comments netsec
- Password hashing in node: bcrypt or argon2? https://www.owasp.org/index.php/Password_Storage_Cheat_Sheet 6 comments javascript
- OWASP Top 10 - 2017 (pdf) https://www.owasp.org/images/7/72/owasp_top_10-2017_%28en%29.pdf.pdf 15 comments netsec
- Unable to access a WEBrick server from remote comptuer https://www.owasp.org/index.php/OWASP_iGoat_Project 9 comments ruby
- OWASP's Application Security Verification Standard 3.0 (pdf) https://www.owasp.org/images/6/67/owaspapplicationsecurityverificationstandard3.0.pdf 3 comments programming
- ZAP Scripting Competition https://www.owasp.org/index.php/2015-08-zap-scriptingcompetition 9 comments netsec
- [Java] I'm writing my first user authentication system. I see that "X Company had all their passwords stolen" all the time - How do I not be that guy? https://www.owasp.org/index.php/Java_Security_Frameworks 22 comments learnprogramming
- Authentication Cheat Sheet https://www.owasp.org/index.php/authentication_cheat_sheet 4 comments webdev
- REST Security Cheat Sheet https://www.owasp.org/index.php/rest_security_cheat_sheet 32 comments netsec
- SVG: The Image that called me https://www.owasp.org/images/0/03/mario_heiderich_owasp_sweden_the_image_that_called_me.pdf 53 comments programming
- OWASP Testing Guide v4 Released (PDF) https://www.owasp.org/images/1/19/otgv4.pdf 4 comments netsec
- What are some http headers everyone should know about and use? https://www.owasp.org/index.php/List_of_useful_HTTP_headers 16 comments webdev
- OWASP Correct Implementation? https://www.owasp.org/index.php/Hashing_Java#Hardening_against_the_attacker.27s_attack 3 comments crypto
- OWASP NINJA PingU - Not just a ping utility https://www.owasp.org/index.php/owasp_ninja_pingu_project 10 comments netsec
- The new OWASP STeBB for security testing websites https://www.owasp.org/index.php/owasp_stebb_project 5 comments netsec
- OWASP Vulnerable Web Applications Directory Project https://www.owasp.org/index.php/owasp_vulnerable_web_applications_directory_project#tab=main 6 comments netsec
- OWASP Top Ten for 2013 released https://www.owasp.org/index.php/top10 13 comments netsec
- Some helpful ways to prevent SQL injection. https://www.owasp.org/index.php/sql_injection_prevention_cheat_sheet 7 comments netsec
- Cheat Sheets for App Dev Security https://www.owasp.org/index.php/cheat_sheets 4 comments coding
- Very interesting webapp attack vector - HTTP Parameter Pollution [PDF] https://www.owasp.org/images/b/ba/appseceu09_carettonidipaola_v0.8.pdf 2 comments netsec
- OWASP Zed Attack Proxy (ZAP) - an open source web app pentest tool for both beginners and experts https://www.owasp.org/index.php/owasp_zed_attack_proxy_project 4 comments netsec
- XSS (Cross Site Scripting) Prevention Cheat Sheet http://www.owasp.org/index.php/xss_%28cross_site_scripting%29_prevention_cheat_sheet 5 comments netsec
- OWASP HTTP Post DoS Tool http://www.owasp.org/index.php/owasp_http_post_tool 12 comments netsec
- XSS (Cross Site Scripting) Prevention Cheat Sheet http://www.owasp.org/index.php?title=xss_(cross_site_scripting)_prevention_cheat_sheet 4 comments web_design
- XSS (Cross Site Scripting) Prevention Cheat Sheet http://www.owasp.org/index.php?title=xss_(cross_site_scripting)_prevention_cheat_sheet 8 comments netsec
- XSS (Cross Site Scripting) Prevention Cheat Sheet http://www.owasp.org/index.php/xss_%28cross_site_scripting%29_prevention_cheat_sheet 36 comments programming