OWASP Foundation @sola124; Open Source Foundation for Application Security

cerca de 300000~5000000

497

Primeiro amargo e depois doce. Para não falhar Boa sorte leva a má sorte

3

172.67.10.39

if(Cookies.get('cookies-ok')=='true'&&window.ga===undefined){window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)};ga.l=+newDate;ga('create','UA--1','auto');ga('send','peview');}elseif(Cookies.get('cookies-ok')=='true'){ga('send','peview');}functionhandleOutboundLinkClicks(event){varhref='';if(event.target.href==undefined)href=event.target.parentElement.href;elsehref=event.target.hrefif(Cookies.get('cookies-ok')=='true'){ga('send','event',{eventCategory:'OutboundLink',eventAction:'click',eventLabel:href,transport:'beacon'});}}OWASPFoundation,theOpenSourceFoundationforApplicationSecurity|OWASPFoundation$(function(){varbaseurl="github.com/OWASP/owasp.github.io/blob/master/";varpath="index.md";$('.repo').html('EditonGitHub');});ForfullfunctionalityofthissiteitisnecessarytoenableJaScript.HerearetheinstructionshowtoenableJaScriptinyourwebbrowser.#bannerimg{max-width:30em;}@media(max-width:1131px){#bannerimg{max-width:30em;}}@media(max-width:800px){#bannerimg{max-width:20em;}}@media(max-width:600px){#bannerimg{max-width:20em;}}@media(max-width:450px){#bannerimg{max-width:250px;}}$(function(){varbannerdata=[];banneryaml=YAML.load('owasp.org/assets/sitedata/banner-data.yml');$.each(banneryaml,function(index){bannerdata.push(this);});if(bannerdata.length>0){varhtmlstring="";varusebanner=null;vardefbanner=null;varcheckdate=newDate();//localtimebutwhocaresaboutthetime?bannerdata.forEach(data=>{if(data.start){varstart=data.start;if(data.start0){varhtmlstring="";varusepop=null;vardefpop=null;varcheckdate=newDate();//localtimebutwhocaresaboutthetime?popdata.forEach(data=>{if(data.start){varstart=data.start;if(data.startStoreDonateJoinThiswebsiteusescookiestoanalyzeourtrafficandonlysharethatinformationwithouranalyticspartners.AcceptxStoreDonateJoin$(function(){url=$(location).attr('href');if(url.includes('')){url=url.replace(//,'');$(location).attr('href',url);return;}//thisworkstogetdatafromajsonfileNOTindata$.getJSON("owasp.org//assets/sitedata/menus.json",function(data){varlistr="";varmlistr="";mlistr+="";mlistr+="";mlistr+="";mlistr+="";mlistr+="";mlistr+="";mlistr+="";$.each(data.menus,function(ndx,menu){listr+=""+menu.title+"";searchitem=issearch(menu.title);if(!menu.items&&!searchitem){mlistr+=""+menu.title+"";}if(menu.items){listr+="";if(!searchitem){mlistr+=""+menu.title+"";mlistr+="";mlistr+="";}$.each(menu.items,function(ndx,item){if(item.separator){listr+="";if(!searchitem)mlistr+="";}else{listr+="";if(!searchitem)mlistr+="";}listr+=""+item.title+"";});listr+="";if(!searchitem){mlistr+="";mlistr+="";}}listr+="";if(!searchitem)mlistr+="";});listr+="";mlistr+="MAKEADONATION";mlistr+="BECOMEAMEMBER";mlistr+="SITEMAP";mlistr+="";//$('.desktop-logo').after(listr);$('#midmenu').html(listr);$('#overlay').after(mlistr);$(".accordion").click(function(){$(this).toggleClass("active");if($(this).next('.panel').css('display')=='block'){$(this).next('.panel').css('display','none');}else{$(this).next('.panel').css('display','block');}});$(".menu-toggler").click(function(){$(".mobile-menu").toggleClass('hide-el');});});});functionissearch(title){returntitle.indexOf('fafa-search')>-1;}ExploretheworldofcybersecurityDrivenbyvolunteers,OWASPresourcesareaccessibleforeveryone.MorethanaPasswordDay2024OWASPissecuringtheweb!EnableMFAtoday!PleasefollowtheinstructionsintheMorethanaPasswordDay2024newsarticletoenablemulti-factorOWASP Foundation @sola124; Open Source Foundation for Application SecurityauthenticationonyourOWASPaccount.Usepassword-freeauthenticationSimplertouseandfarmoresecurethanpasswords,passkeysusecryptographictoprovethatyouareyou.SecureyouremailaccountEmailisthemostcommonformofresettingyourpassword.Addextrasecuritytodeteraccesstoyouraccounts:Strongpassword(long,randomlygeneratedandunique)Multi-factorauthentication/two-stepverificationAddlayersofsecurityAdditionalsecuritymeasurescanhelppreventphishingandotherattacks,ifusedinadditiontoyourpassword.Ahardwaresecuritykey(ortoken)AnauthenticatorappUseapasswordmanerUsingapasswordmanermeansyoucanusestrong,randomlygenerated,hardertoguesspasswords.Useastrong,memorablepasswordmanerpassword.UseatechniqueorpassphrasestopickpasswordsUse“threerandomwords”orpassphrasestopickpasswordsthatareeasiertorememberbuthardtoguess.Hacked?MovefasttochangepasswordsYourpasswordsshouldbechangedimmediatelyif:OneofyourdevicesiscompromisedIfanonlinesiteorserviceyouuseishackedUsingrandomuniquepasswordswithapasswordmanermeansyouonlyneedtochangebreachedpasswords.Manypasswordmanerscanhelpyouidentifywhichpasswordsneedchanging.MorethanaPasswordDay2024OWASPissecuringtheweb!EnableMFAtoday!PleasefollowtheinstructionsintheMorethanaPasswordDay2024newsarticletoenablemulti-factorauthenticationonyourOWASPaccount.Usepassword-freeauthenticationSimplertouseandfarmoresecurethanpasswords,passkeysusecryptographictoprovethatyouareyou.SecureyouremailaccountEmailisthemostcommonformofresettingyourpassword.Addextrasecuritytodeteraccesstoyouraccounts:Strongpassword(long,randomlygeneratedandunique)Multi-factorauthentication/two-stepverification$(function(){numdivs=14;id=Math.floor(Math.random()*numdivs);strdiv="ev"+id;$('#'+strdiv).show();});UpcomingatOWASP.outer{display:block;background-color:black;color:white;padding:8px;margin-bottom:12px;}.container{display:grid;grid-template-columns:1fr1fr;grid-template-rows:180px180px;gap:4px;color:white;}.box1{grid-column:1;grid-row:1/3;background:linear-gradient(145deg,black,blue);border-radius:8px;padding:12px;}.box2{grid-column:2;grid-row:1;background:linear-gradient(145deg,black,gray);border-radius:8px;padding:12px;}.box3{grid-column:2;grid-row:2;background:linear-gradient(145deg,black,gray);border-radius:8px;padding:12px;}.proj-spotlight{display:grid;grid-template-columns:1fr2fr1fr;grid-template-rows:100px50px50px100px;gap:4px;}.proj-nonspot{display:grid;grid-template-columns:1fr2fr1fr;grid-template-rows:70px10px70px;gap:4px;}.pstype{grid-column:1;grid-row:1;font-size:smaller;border:2pxsolidwhite;border-radius:8px;max-height:40px;line-height:40px;margin:auto;padding-left:8px;padding-right:8px;}.pstitle{grid-row:4;grid-column:1;font-size:larger;font-weight:bold;}.pstitle2{grid-row:3;grid-column:1;font-size:larger;font-weight:bold;}.psdesc{grid-row:4;grid-column:2;}.psdesc2{grid-row:3;grid-column:2;}.psn{grid-row:4;grid-column:3;vertical-align:middle;margin-left:50%;}.psn2{grid-row:3;grid-column:3;vertical-align:middle;margin-left:50%;}.nbox{background-color:#;color:white;font-weight:bold;padding:2px;border-radius:8px;width:45px;height:45px;text-align:center;line-height:45px;}.buffer{padding:12px;}.idea-container{margin-top:50px;margin-bottom:50px;margin-left:20px;margin-right:20px;display:grid;grid-template-columns:.25fr1fr1.5fr.5fr;grid-template-rows:200px50px50;gap:12px;}.lightbulb{grid-column:1;grid-row:1;font-size:24px;font-weight:bold;text-align:center;vertical-align:middle;}.idea{grid-column:2;grid-row:1;font-size:24px;font-weight:bold;}.grow{grid-column:3;grid-row:1;font-size:smaller;text-align:center;}.start{grid-column:4;grid-row:1;}.hr{grid-column:1/5;grid-row:2;border:2pxsolidgray;}.seeall{float:right;}@media(max-width:768px){.container{grid-template-rows:315px315px315px;}.seeall{float:none;}.box1{grid-row:1;grid-column:1/3;}.box2{grid-column:1/3;grid-row:2;}.box3{grid-column:1/3;grid-row:3;}.pstype{grid-column:1/3;}.proj-spotlight{grid-template-rows:70px10px70px;}.pstitle{grid-row:3;grid-column:1/3;}.psdesc{grid-row:4;}.pstitle2{griOWASP Foundation @sola124; Open Source Foundation for Application Securityd-column:1/3;}.psdesc2{grid-row:4;}.start{grid-row:3;grid-column:1/4;}}QuickaccesstoourhighlightedflshipresourcesSeeallflshipresources(15)DocumentationTopTenThereferencestandardforthemostcriticalwebapplicationsecurityrisks8594;DocumentationASVSApplicationsecurityverificationstandard8594;DocumentationCheatSheetsListofcrucialappsecurityinformation8594;Heanideaforaproject?TakeadvanteofourresourcesandletitgrowwithOWASP.Startaprojectvarmtxt="[{\"name\":\"Amass\",\"repo\":\"\",\"shortname\":\"Amass\",\"mediablurb\":\"Visualizeyournetworkattacksurfacesandexternalassets\"},{\"name\":\"ApplicationSecurityVerificationStandard\",\"repo\":\"\",\"shortname\":\"ASVS\",\"mediablurb\":\"Theindustrystandardforwebapplicationsecurityverification\"},{\"name\":\"CheatSheets\",\"repo\":\"\",\"shortname\":\"CheatSheets\",\"mediablurb\":\"Listofcrucialappsecurityinformation\"},{\"name\":\"CycloneDX\",\"repo\":\"\",\"shortname\":\"CycloneDX\",\"mediablurb\":\"BOMstandardforadvancedsupplychaincybersecurityriskmitigation\"},{\"name\":\"DefectDojo\",\"repo\":\"\",\"shortname\":\"DefectDojo\",\"mediablurb\":\"LeadingvulnerabilitymanementplatformforDevSecOps\"},{\"name\":\"DependencyCheck\",\"repo\":\"\",\"shortname\":\"DependencyCheck\",\"mediablurb\":\"SCAtoolsuitetocheckfordependencyvulnerabilities\"},{\"name\":\"DependencyTrack\",\"repo\":\"\",\"shortname\":\"DependencyTrack\",\"mediablurb\":\"Componentanalysisplatformtoidentifyrisksinthesupplychain\"},{\"name\":\"JuiceShop\",\"repo\":\"\",\"shortname\":\"JuiceShop\",\"mediablurb\":\"Modernandsophisticatedintentionallynon-securewebapplication\"},{\"name\":\"MobileAppSecurity\",\"repo\":\"\",\"shortname\":\"MAS\",\"mediablurb\":\"Theindustrystandardformobileapplicationsecurityverification\"},{\"name\":\"ModsecurityCoreRuleSet\",\"repo\":\"\",\"shortname\":\"CRS\",\"mediablurb\":\"DominantWebApplicationFirewallrulesetforModSecurityandcompatibleWAFs\"},{\"name\":\"Owtf\",\"repo\":\"\",\"shortname\":\"OWTF\",\"mediablurb\":\"Webtestingframeworkforpentesters\"},{\"name\":\"Samm\",\"repo\":\"\",\"shortname\":\"SAMM\",\"mediablurb\":\"Softwareassurancematuritymodeltoimprovesecurityposture\"},{\"name\":\"SecurityKnowledgeFramework\",\"repo\":\"\",\"shortname\":\"\",\"mediablurb\":\"Securityknowledgeframeworkofsecurecodingprinciples\"},{\"name\":\"SecurityShepherd\",\"repo\":\"\",\"shortname\":\"SecurityShepherd\",\"mediablurb\":\"Webandmobileapplicationtrainingplatform\"},{\"name\":\"TopTen\",\"repo\":\"\",\"shortname\":\"Top10\",\"mediablurb\":\"Mostcriticalsecurityrisksinwebapplications\"},{\"name\":\"WebSecurityTestingGuide\",\"repo\":\"\",\"shortname\":\"WSTG\",\"mediablurb\":\"Testingresourceforwebapplicationandsecurityprofessionals\"},{\"name\":\"ZAP\",\"repo\":\"\",\"shortname\":\"ZAP\",\"mediablurb\":\"Highlypopularwebapplicationsecurityscanningtool\"}]";vargMedia=JSON.parse(mtxt);$(function(){varallprj="[{\"name\":\"Amass\",\"url\":\"owasp.org//\",\"created\":\"2019-09-12\",\"updated\":\"2024-08-31\",\"build\":\"building\",\"codeurl\":\"github.com/owasp-amass/amass\",\"title\":\"OWASPAmass\",\"level\":\"4\",\"type\":\"code\",\"region\":\"Unknown\",\"pitch\":\"Anopensourceframeworkthathelpsinformationsecurityprofessionalsperformnetworkmappingofattacksurfacesandexternalassetdiscoveryusingopensourceintelligencegatheringandreconnaissancetechniques!\",\"meetup-group\":\"\",\"country\":\"\"},{\"name\":\"ApplicationSecurityVerificationStandard\",\"url\":\"owasp.org//\",\"created\":\"2019-09-12\",\"updated\":\"2024-11-17\",\"build\":\"built\",\"codeurl\":\"github.com/OWASP/ASVSgithub.com/OWASP/ASVS\",\"title\":\"OWASPApplicationSecurityVerificationStandard(ASVS)\",\"level\":\"4\",\"type\":\"standards\",\"region\":\"Unknown\",\"pitch\":\"TheOWASPApplicationSecurityVerificationStandard(ASVS)Projectisaframeworkofsecurityrequirementsthatfocusondefiningthesecuritycontrolsrequiredwhendesigning,developingandtestingmodernwebapplicationsandwebservices.\",\"meetup-group\":\"\",\"country\":\"\"},{\"name\":\"CheatSheets\",\"url\":\"owasp.org//\",\"created\":\"2019-09-12\",\"updated\":\"2024-06-06\",\"build\":\"built\",\"codeurl\":\"github.com/OWASP/CheatSheetSeriesgithub.com/OWASP/CheatSheetSeries\",\"title\":\"OWASPCheatSheetSeries\",\"level\":\"4\",\"type\":\"documentation\",\"region\":\"Unknown\",\"pitch\":\"TheOWASPCheatSheetSeriesprojectprovidesasetofconcisegoodpracticeguidesforapplicationdevelopersanddefenderstofollow.\",\"meetup-group\":\"\",\"country\":\"\"},{\"name\":\"Cyclonedx\",\"url\":\"owasp.org//\",\"created\":\"2021-06-04\",\"updated\":\"2023-12-19\",\"build\":\"built\",\"codeurl\":\"\",\"title\":\"OWASPCycloneDX\",\"level\":\"4\",\"type\":\"standards\",\"region\":\"Unknown\",\"pitch\":\"OWASPCycloneDXisafull-stackBillofMaterials(BOM)standardthatprovidesadvancedsupplychaincapabilitiesforcyberriskreduction.\",\"meetup-group\":\"\",\"country\":\"\"},{\"name\":\"Defectdojo\",\"url\":\"owasp.org//\",\"created\":\"2019-09-12\",\"updated\":\"2024-09-18\",\"build\":\"built\",\"codeurl\":\"github.com/DefectDojo/django-DefectDojogithub.com/DefectDojo/django-DefectDojo\",\"title\":\"OWASPDefectdojo\",\"level\":\"4\",\"type\":\"code\",\"region\":\"Unknown\",\"pitch\":\"TheleadingopensourceapplicationvulnerabilitymanementtoolbuiltforDevOpsandcontinuoussecurityintegration.\",\"meetup-group\":\"\",\"country\":\"\"},{\"name\":\"DependencyCheck\",\"url\":\"owasp.org//\",\"created\":\"2019-09-12\",\"updated\":\"2024-09-22\",\"build\":\"built\",\"codeurl\":\"github.com/jeremylong/DependencyCheck\",\"title\":\"OWASPDependency-Check\",\"level\":\"4\",\"type\":\"code\",\"region\":\"Unknown\",\"pitch\":\"Dependency-CheckisaSoftwareCompositionAnalysis(SCA)toolsuitethatidentifiesprojectdependenciesandchecksifthereareanyknown,publiclydisclosed,vulnerabilities.\",\"meetup-group\":\"\",\"country\":\"\"},{\"name\":\"DependencyTrack\",\"url\":\"owasp.org//\",\"created\":\"2019-09-12\",\"updated\":\"2024-11-20\",\"build\":\"built\",\"codeurl\":\"\",\"title\":\"OWASPDependency-Track\",\"level\":\"4\",\"type\":\"code\",\"region\":\"Unknown\",\"pitch\":\"IntelligentComponentAnalysisplatformthatallowsorganizationstoidentifyandreduceriskinthesoftwaresupplychain.\",\"meetup-group\":\"\",\"country\":\"\"},{\"name\":\"JuiceShop\",\"url\":\"owasp.org//\",\"created\":\"2019-09-12\",\"updated\":\"2024-11-18\",\"build\":\"built\",\"codeurl\":\"github.com/juice-shop/juice-shopgithub.com/juice-shop/juice-shop#from-sources\",\"title\":\"OWASPJuiceShop\",\"level\":\"4\",\"type\":\"code\",\"region\":\"Unknown\",\"pitch\":\"Probablythemostmodernandsophisticatedinsecurewebapplicationforsecuritytrainings,awarenessdemosandCTFs.AlsogreatvoluntaryguineapigforyoursecuritytoolsandDevSecOpspipelines!\",\"meetup-group\":\"\",\"country\":\"\"},{\"name\":\"MobileAppSecurity\",\"url\":\"owasp.org//\",\"created\":\"2019-09-12\",\"updated\":\"2024-07-13\",\"build\":\"built\",\"codeurl\":\"github.com/OWASP/owasp-mastggithub.com/OWASP/owasp-mastg\",\"title\":\"OWASPMobileApplicationSecurity\",\"level\":\"4\",\"type\":\"documentation\",\"region\":\"Unknown\",\"pitch\":\"TheOWASPMobileApplicationSecurity(MAS)projectconsistsofaseriesofdocumentsthatestablishasecuritystandardformobileappsandacomprehensivetestingguidethatcoverstheprocesses,techniques,andtoolsusedduringamobileapplicationsecurityassessment,aswellasanexhaustivesetoftestcasesthatenablestesterstodeliverconsistentandcompleteresults.\",\"meetup-group\":\"\",\"country\":\"\"},{\"name\":\"ModsecurityCoreRuleSet\",\"url\":\"owasp.org//\",\"created\":\"2019-09-12\",\"updated\":\"2024-11-13\",\"build\":\"built\",\"codeurl\":\"github.com/coreruleset/corerulesetgithub.com/coreruleset/coreruleset\",\"title\":\"OWASPCRS\",\"level\":\"4\",\"type\":\"code\",\"region\":\"Unknown\",\"pitch\":\"TheOWASPCRSisasetofgenericattackdetectionrulesforusewithModSecurityorcompatiblewebapplicationfirewalls.TheCRSaimstoprotectwebapplicationsfromawiderangeofattacks,includingtheOWASPTopTen,withaminimumoffalsealerts.\",\"meetup-group\":\"\",\"country\":\"\"},{\"name\":\"Owtf\",\"url\":\"owasp.org//\",\"created\":\"2019-09-12\",\"updated\":\"2024-04-22\",\"build\":\"built\",\"codeurl\":\"github.com/owtf/owtfgithub.com/owtf/owtf\",\"title\":\"OWASPOWTF\",\"level\":\"4\",\"type\":\"code\",\"region\":\"Unknown\",\"pitch\":\"OffensiveWebTestingFramework(OWTF),isanOWASP+PTESfocusedtrytounitegreattoolsandmakepentestingmoreefficient,writtenmostlyinPython.\",\"meetup-group\":\"\",\"country\":\"\"},{\"name\":\"Samm\",\"url\":\"owasp.org//\",\"created\":\"2019-09-12\",\"updated\":\"2024-10-30\",\"build\":\"built\",\"codeurl\":\"github.com/OWASP/SAMMgithub.com/owaspsamm/core\",\"title\":\"OWASPSAMM\",\"level\":\"4\",\"type\":\"documentation\",\"region\":\"Unknown\",\"pitch\":\"ASoftwareAssuranceMaturityModel(SAMM)thatprovidesaneffectiveandmeasurablewayforalltypesoforganizationstoanalyseandimprovetheirsoftwaresecurityposture.\",\"meetup-group\":\"owasp-samm\",\"country\":\"\"},{\"name\":\"SecurityShepherd\",\"url\":\"owasp.org//\",\"created\":\"2019-09-12\",\"updated\":\"2024-06-24\",\"build\":\"built\",\"codeurl\":\"github.cOWASP Foundation @sola124; Open Source Foundation for Application Securityom/OWASP/SecurityShepherd\",\"title\":\"OWASPSecurityShepherd\",\"level\":\"4\",\"type\":\"code\",\"region\":\"Unknown\",\"pitch\":\"OWASPSecurityShepherdisawebandmobileapplicationsecuritytrainingplatform.SecurityShepherdhasbeendesignedtofosterandimprovesecurityawarenessamongavariedskill-setdemographic.TheaimofthisprojectistotakeAppSecnovicesorexperiencedengineersandsharpentheirpenetrationtestingskillsettosecurityexpertstatus.\",\"meetup-group\":\"\",\"country\":\"\"},{\"name\":\"TopTen\",\"url\":\"owasp.org//\",\"created\":\"2019-09-12\",\"updated\":\"2024-11-23\",\"build\":\"built\",\"codeurl\":\"github.com/OWASP/Top10\",\"title\":\"OWASPTopTen\",\"level\":\"4\",\"type\":\"documentation\",\"region\":\"Unknown\",\"pitch\":\"TheOWASPTop10isthereferencestandardforthemostcriticalwebapplicationsecurityrisks.AdoptingtheOWASPTop10isperhapsthemosteffectivefirststeptowardschangingyoursoftwaredevelopmentculturefocusedonproducingsecurecode.\",\"meetup-group\":\"\",\"country\":\"\"},{\"name\":\"WebSecurityTestingGuide\",\"url\":\"owasp.org//\",\"created\":\"2019-09-12\",\"updated\":\"2024-11-20\",\"build\":\"built\",\"codeurl\":\"github.com/OWASP/wstggithub.com/OWASP/wstg\",\"title\":\"OWASPWebSecurityTestingGuide\",\"level\":\"4\",\"type\":\"documentation\",\"region\":\"Unknown\",\"pitch\":\"TheWebSecurityTestingGuide(WSTG)Projectproducesthepremiercybersecuritytestingresourceforwebapplicationdevelopersandsecurityprofessionals.\",\"meetup-group\":\"\",\"country\":\"\"}]";varprojects=JSON.parse(allprj);bigpick=Math.floor(Math.random()*projects.length);pick2=bigpick;pick3=bigpick;do{pick2=Math.floor(Math.random()*projects.length);}while(pick2==bigpick);do{pick3=Math.floor(Math.random()*projects.length);}while(pick3==bigpick||pick3==pick2);html='QuickaccesstoourhighlightedflshipresourcesSeeallflshipresources(15)';html+='';html+=getBoxContent(projects[bigpick],"box1");html+=getBoxContent(projects[pick2],"box2");html+=getBoxContent(projects[pick3],"box3");html+='';$('.outer').html(html);});functiongetProjectMediaText(project){mediaret=["unknown","unknown"]for(ndxingMedia){if(project.url.indexOf(gMedia[ndx].repo)>-1){mediaret[0]=gMedia[ndx].shortname;mediaret[1]=gMedia[ndx].mediablurb;break;}}if(mediaret[0]=="unknown"){alert(project.url);}returnmediaret;}functiongetProjectContent(project,boxtype){pstitle='pstitle';psdesc='psdesc';psn='psn';if(boxtype!=1){pstitle+='2';psdesc+='2';psn+='2';}media=getProjectMediaText(project)varhtml=''+project.type+'';html+=''+media[0]+'';//thisneedstochangetoshortnamehtml+=''+media[1]+'';//thisneedstochangetoshorttextonceitexistshtml+='';html+='8594;';html+='';returnhtml;}functiongetBoxContent(project,box){varhtml='';boxtype=1;if(box=="box1"){html+='';boxtype=1;}else{html+='';if(box=="box2"){boxtype=2;}else{boxtype=3;}}html+=getProjectContent(project,boxtype);html+='';html+='';returnhtml;}MorethanaPasswordDay2024AndrewvanderStock,November12,2024WelcometotheannualMorethanaPasswordDay!Tocelebratethisyear’sevent,OWASPisenablingmulti-factorauthenticationacrosstheOWASPFoundation’sinfrastructure.Thisisasignificantstepforwardinsecuringoursystemsanddata.Atthestartofthisyear’sevent,wehadonly21%ofallOWASPaccountsenrolledinMFA.We’reaimingtoincreasethisto100%bytheendoftheyear....readmoreRecentOWASPNews&OpinionsAworkaroundforOWASPFoundationemailsbeingblockedbyMicrosoftOffice365,October30,2024 SecuringReactNativeMobileAppswithOWASPMAS,October2,2024 OWASPEmailProblems(andsolutions),August1,2024 NewArticlesofIncorporationandBylawsfortheOWASPFoundation!,July9,2024 UpcomingConferencesOWASPGlobalAppSecEU2025,May26-30,2025OWASPGlobalAppSecWashingtonDC2025,November3-7,2025OWASPGlobalAppSecSanFrancisco2026,November2-6,2026varmembers=[];varplat_indices=[];vargold_indices=[];varother_indices=[];functionget_next_member(members,indexUsed){//random6//0to2=Platinum(.2>Other)//3to4=Gold(.1>Other)//5=Othermember=null;chosenIndex=-1;varpick=Math.floor(Math.random()*100);varrandomIndex=-1;if(pick=plat_indices.length){randomIndex=0;}if(randomIndex==cycleIndex){//wecouldnotfindaplatmembernotalreadyinthelist....break;}}}if(chosenIndex==-1&&pick=gold_indices.length){randomIndex=0;}if(randomIndex==cycleIndex){//wecouldnotfindaplatmembernotalreadyinthelist....break;}}}if(chosenIndex==-1){//pickanothermemberrandomIndex=Math.floor(Math.random()*other_indices.length);pIndex=other_indices[randomIndex];cycleIndex=randomIndexwhile(chosenIndex==-1){randomIndex++;if(indexUsed.indexOf(pIndex)==-1){chosenIndex=pIndex;}elseif(randomIndex>=other_indices.length){randomIndex=0;}if(randomIndex==cycleIndex){//wecouldnotfindaplatmembernotalreadyinthelist....break;}}}if(chosenIndex>=0){member=members[chosenIndex];indexUsed.push(chosenIndex);varmembertype='notamember';if(member.member&&(member.membertype==1||!member.membertype))membertype='silvermember';elseif(member.member&&member.membertype==2)membertype='platinummember';elseif(member.member&&member.membertype==3)membertype='goldmember';elseif(member.member&&member.membertype)membertype=member.membertype;}returnmember;}$(function(){varcorp_members=YAML.load('owasp.org/assets/sitedata/corp_members.yml');$.each(corp_members,function(index){index=members.push(this)-1;if(this.member&&this.membertype==3)gold_indices.push(index);elseif(this.member&&this.membertype==2)plat_indices.push(index);elseother_indices.push(index);});varindexUsed=[];varcounter=0;varnumberOfImes=9;varmember=get_next_member(members,indexUsed);htmlstring='Spotlight:'+member["name"]+'';htmlstring+='';htmlstring+=''+member["description"]+'';$(".member-spotlight").html(htmlstring);if(members.length>0){varhtmlstring="";while(counterHOMEPROJECTSCHAPTERSEVENTSABOUTPRIVACYSITEMAPCONTACTOWASP,theOWASPlogo,andGlobalAppSecareregisteredtrademarksandAppSecDays,AppSecCalifornia,AppSecCali,SnowFROC,andLASCONaretrademarksoftheOWASPFoundation,Inc.Unlessotherwisespecified,allcontentonthesiteisCreativeCommonsAttribution-ShareAlikev4.0andprovidedwithoutwarrantyofserviceoraccuracy.Formoreinformation,pleaserefertoourGeneralDisclaimer.OWASPdoesnotendorseorrecommendcommercialproductsorservices,allowingourcommunitytoremainvendorneutralwiththecollectivewisdomofthebestmindsinsoftwaresecurityworldwide.2024,OWASPFoundation,Inc.