diff --git a/.github/ISSUE_TEMPLATE/content.md b/.github/ISSUE_TEMPLATE/content.md deleted file mode 100644 index 48622967..00000000 --- a/.github/ISSUE_TEMPLATE/content.md +++ /dev/null @@ -1,16 +0,0 @@ ---- -name: Create content -about: Suggest content for the Developer Guide -title: 'Provide content' -labels: 'content' -assignees: '' - ---- - -**Describe what content should be added** : - - -**Context** : -Section: (eg '02-foundations/03-security-principles') - - diff --git a/.github/ISSUE_TEMPLATE/request.md b/.github/ISSUE_TEMPLATE/request.md deleted file mode 100644 index 36bccddf..00000000 --- a/.github/ISSUE_TEMPLATE/request.md +++ /dev/null @@ -1,16 +0,0 @@ ---- -name: Change request -about: Suggest a change for the Developer Guide -title: '' -labels: 'enhancement' -assignees: '' - ---- - -**Describe what change you would like** : - - -**Context** : -Section: (eg '02-foundations/03-security-principles') - - diff --git a/.github/dependabot.yml b/.github/dependabot.yml deleted file mode 100644 index d7812cdd..00000000 --- a/.github/dependabot.yml +++ /dev/null @@ -1,21 +0,0 @@ -version: 2 -updates: - - package-ecosystem: "github-actions" - directory: ".github/workflows" - schedule: - interval: "monthly" - groups: - version-update: - applies-to: version-updates - patterns: - - "*" - update-types: - - "minor" - - "patch" - security-update: - applies-to: security-updates - patterns: - - "*" - update-types: - - "patch" - - "minor" diff --git a/.github/funding.yaml b/.github/funding.yaml deleted file mode 100644 index b5fe0f5e..00000000 --- a/.github/funding.yaml +++ /dev/null @@ -1,2 +0,0 @@ -custom: https://owasp.org/donate/?reponame=www-project-developer-guide&title=OWASP+Developer+Guide -github: OWASP diff --git a/.github/pull_request_template.md b/.github/pull_request_template.md deleted file mode 100644 index dcbde2b6..00000000 --- a/.github/pull_request_template.md +++ /dev/null @@ -1,29 +0,0 @@ -**Summary** : - -If this closes an existing issue then add "closes #xxxx", where xxxx is the issue number - -**Description for the changelog** : - - -**Declaration**: - -- [ ] content meets the [license](../license.txt) for this project -- [ ] AI has not been used, or has been declared, in this pull request - -**Other info** : - - -Thanks for submitting a pull request! - -Please make sure you follow our [Code of Conduct](../code_of_conduct.md) -and our [contributing guidelines](../contributing.md) - -Automated tests are run to check links, markdown and spelling - -The pull request must pass these tests before it can be merged diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml deleted file mode 100644 index 158d2f05..00000000 --- a/.github/workflows/ci.yaml +++ /dev/null @@ -1,180 +0,0 @@ -name: CI pipeline - -on: - push: - branches: - - main - workflow_dispatch: - -permissions: - contents: write - -concurrency: - group: "pages" - cancel-in-progress: false - -# for security reasons the github actions are pinned to specific release versions -jobs: - link_checker: - name: Link checker - runs-on: ubuntu-24.04 - steps: - - name: Checkout markdown - uses: actions/checkout@v5.0.0 - - - name: Link Checker - uses: lycheeverse/lychee-action@v2.6.1 - with: - args: >- - --no-progress - --max-retries 1 - --retry-wait-time 10 - --max-concurrency 2 - '**/*.md' - '*.md' - fail: true - env: - GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}} - - md_linter: - name: Lint web doc - runs-on: ubuntu-24.04 - steps: - - name: Checkout markdown - uses: actions/checkout@v5.0.0 - - - name: Lint markdown - uses: DavidAnson/markdownlint-cli2-action@v20.0.0 - with: - config: '.markdownlint.yaml' - globs: | - docs/**/*.md - docs/*.md - *.md - - spell_checker: - name: Check spelling - runs-on: ubuntu-24.04 - steps: - - name: Checkout markdown - uses: actions/checkout@v5.0.0 - - - name: Spell check EN language - uses: rojopolis/spellcheck-github-actions@0.52.0 - with: - config_path: .spellcheck-en.yaml - - - name: Spell check ES language - uses: rojopolis/spellcheck-github-actions@0.52.0 - with: - config_path: .spellcheck-es.yaml - - # rojopolis/spellcheck-github-actions does not support PT-BR, - # only PT, and PT-BR is too different to pass a PT spellcheck - - name: Set up Python for PT-BR - uses: actions/setup-python@v6.0.0 - with: - python-version: '3.10' - - - name: Install pyspelling for PT-BR - run: | - python -m pip install --upgrade pip setuptools - python -m pip install pyspelling - sudo apt-get install aspell aspell-pt - - - name: Spell check PT-BR language - run: | - python -m pyspelling --config .spellcheck-pt-br.yaml - - deploy: - name: Deploy web doc - runs-on: ubuntu-latest - needs: [md_linter, spell_checker] - steps: - - name: Checkout markdown - uses: actions/checkout@v5.0.0 - - - name: Install python - uses: actions/setup-python@v6.0.0 - with: - python-version: 3.x - - - name: Install python packages - run: | - python -m pip install --upgrade pip setuptools wheel - pip install mkdocs - pip install mkdocs-material - pip install mkdocs-open-in-new-tab - pip install mkdocs-with-pdf - - - name: Copy contributing tab files - run: | - cp code_of_conduct.md docs/. - cp contributing.md docs/. - cp license.txt docs/. - - - name: Build check - run: mkdocs build - - - name: Deploy - run: mkdocs gh-deploy --force --verbose - - export_pdf: - name: Export PDFs - runs-on: ubuntu-latest - needs: [md_linter, spell_checker] - steps: - - name: Checkout markdown - uses: actions/checkout@v5.0.0 - - - name: Install python - uses: actions/setup-python@v6.0.0 - with: - python-version: 3.x - - - name: Install python packages - run: | - python -m pip install --upgrade pip setuptools wheel - pip install mkdocs - pip install mkdocs-material - pip install mkdocs-open-in-new-tab - pip install mkdocs-with-pdf - - - name: Build check - run: mkdocs build - - - name: Create EN PDF - run: mkdocs build --config-file mkdocs-pdf-en.yaml - - - name: Upload EN PDF - uses: actions/upload-artifact@v4.6.2 - with: - name: pdf-export-en - path: site/OWASP_Developer_Guide.pdf - - - name: Create ES PDF - run: mkdocs build --config-file mkdocs-pdf-es.yaml - - - name: Upload ES PDF - uses: actions/upload-artifact@v4.6.2 - with: - name: pdf-export-es - path: site/OWASP_Developer_Guide-ES.pdf - - - name: Create FA PDF - run: mkdocs build --config-file mkdocs-pdf-fa.yaml - - - name: Upload FA PDF - uses: actions/upload-artifact@v4.6.2 - with: - name: pdf-export-fa - path: site/OWASP_Developer_Guide-FA.pdf - - - name: Create PT-BR PDF - run: mkdocs build --config-file mkdocs-pdf-pt-br.yaml - - - name: Upload PT-BR PDF - uses: actions/upload-artifact@v4.6.2 - with: - name: pdf-export-pt-br - path: site/OWASP_Developer_Guide-PT-BR.pdf diff --git a/.github/workflows/housekeeping.yaml b/.github/workflows/housekeeping.yaml deleted file mode 100644 index fc72c7fb..00000000 --- a/.github/workflows/housekeeping.yaml +++ /dev/null @@ -1,73 +0,0 @@ -name: Housekeeping -# checks are on all directories - -on: - # Run daily at 6:15 - schedule: - - cron: '15 6 * * *' - workflow_dispatch: - -# for security reasons the github actions are pinned to specific release versions -jobs: - chores: - name: Tidy workflows - runs-on: ubuntu-24.04 - permissions: - actions: write - - steps: - - name: Delete stale workflow runs - uses: Mattraks/delete-workflow-runs@v2.0.6 - with: - token: ${{ github.token }} - repository: ${{ github.repository }} - retain_days: 28 - keep_minimum_runs: 10 - - - name: Delete unused workflows - uses: otto-de/purge-deprecated-workflow-runs@v3.0.4 - with: - token: ${{ github.token }} - - link_checker: - name: Link checker - runs-on: ubuntu-24.04 - steps: - - name: Checkout markdown - uses: actions/checkout@v5.0.0 - - - name: Link Checker - uses: lycheeverse/lychee-action@v2.6.1 - with: - # skip the jekyll files under '_includes' directory, check all other directories - args: >- - --no-progress - --max-retries 1 - --retry-wait-time 10 - --max-concurrency 2 - '**/*.md' - '*.md' - fail: true - env: - GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}} - - stale: - name: Tidy pull requests - runs-on: ubuntu-24.04 - permissions: - pull-requests: write - issues: write - - steps: - - name: Tidy stale PRs and issues - uses: actions/stale@v10.1.0 - with: - days-before-issue-stale: 183 - days-before-issue-close: -1 - stale-issue-message: 'This issue is stale because it has been open for 6 months with no activity.' - stale-issue-label: stale - remove-issue-stale-when-updated: true - days-before-pr-stale: 42 - days-before-pr-close: 7 - stale-pr-message: 'This PR is stale because it has been open 42 days with no activity. Remove stale label, or add a comment, otherwise it will be closed in 7 days.' - close-pr-message: 'This PR was closed because it has been stalled for 8 weeks with no activity.' diff --git a/.github/workflows/pr.yaml b/.github/workflows/pr.yaml deleted file mode 100644 index c868bfd5..00000000 --- a/.github/workflows/pr.yaml +++ /dev/null @@ -1,157 +0,0 @@ -name: Pull request pipeline - -on: - pull_request: - branches: - - main - workflow_dispatch: - -# for security reasons the github actions are pinned to specific release versions -jobs: - link_checker: - name: Link checker - runs-on: ubuntu-24.04 - steps: - - name: Checkout markdown - uses: actions/checkout@v5.0.0 - - - name: Link Checker - uses: lycheeverse/lychee-action@v2.6.1 - with: - args: >- - --no-progress - --max-retries 1 - --retry-wait-time 10 - --max-concurrency 2 - '**/*.md' - '*.md' - fail: true - env: - GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}} - - md_linter: - name: Lint markdown - runs-on: ubuntu-24.04 - steps: - - name: Checkout markdown - uses: actions/checkout@v5.0.0 - - - name: Lint markdown - uses: DavidAnson/markdownlint-cli2-action@v20.0.0 - with: - config: '.markdownlint.yaml' - globs: | - docs/**/*.md - docs/*.md - *.md - - spell_checker_en: - name: Check EN spelling - runs-on: ubuntu-24.04 - steps: - - name: Checkout markdown - uses: actions/checkout@v5.0.0 - - - name: Spell check EN language - uses: rojopolis/spellcheck-github-actions@0.52.0 - with: - config_path: .spellcheck-en.yaml - - spell_checker_es: - name: Check ES spelling - runs-on: ubuntu-24.04 - steps: - - name: Checkout markdown - uses: actions/checkout@v5.0.0 - - - name: Spell check ES language - uses: rojopolis/spellcheck-github-actions@0.52.0 - with: - config_path: .spellcheck-es.yaml - - spell_checker_pt-br: - name: Check PT-BR spelling - runs-on: ubuntu-24.04 - steps: - - name: Checkout markdown - uses: actions/checkout@v5.0.0 - - # rojopolis/spellcheck-github-actions does not support PT-BR, - # only PT, and PT-BR is too different to pass a PT spellcheck - - name: Set up Python - uses: actions/setup-python@v6.0.0 - with: - python-version: '3.10' - - - name: Install pyspelling - run: | - python -m pip install --upgrade pip setuptools - python -m pip install pyspelling - sudo apt-get install aspell aspell-pt - - - name: Spell check PT-BR release - run: | - python -m pyspelling --config .spellcheck-pt-br.yaml - - build_check: - name: Build check - runs-on: ubuntu-24.04 - needs: [md_linter, spell_checker_en, spell_checker_es, spell_checker_pt-br] - steps: - - name: Checkout markdown - uses: actions/checkout@v5.0.0 - - - name: Install python - uses: actions/setup-python@v6.0.0 - with: - python-version: 3.x - - - name: Install python packages - run: | - python -m pip install --upgrade pip setuptools wheel - pip install mkdocs - pip install mkdocs-material - pip install mkdocs-open-in-new-tab - pip install mkdocs-with-pdf - - - name: Copy contributing tab files - run: | - cp code_of_conduct.md docs/. - cp contributing.md docs/. - cp license.txt docs/. - - - name: Build docs - run: mkdocs build - - export_pdf: - name: Export PDFs - runs-on: ubuntu-24.04 - needs: [build_check] - steps: - - name: Checkout markdown - uses: actions/checkout@v5.0.0 - - - name: Install python - uses: actions/setup-python@v6.0.0 - with: - python-version: 3.x - - - name: Install python packages - run: | - python -m pip install --upgrade pip setuptools wheel - pip install mkdocs - pip install mkdocs-material - pip install mkdocs-open-in-new-tab - pip install mkdocs-with-pdf - - - name: Build pdf for EN - run: mkdocs build --config-file mkdocs-pdf-en.yaml - - - name: Build pdf for ES - run: mkdocs build --config-file mkdocs-pdf-es.yaml - - - name: Build pdf for FA - run: mkdocs build --config-file mkdocs-pdf-fa.yaml - - - name: Build pdf for PT-BR - run: mkdocs build --config-file mkdocs-pdf-pt-br.yaml diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml deleted file mode 100644 index c09db037..00000000 --- a/.github/workflows/release.yaml +++ /dev/null @@ -1,70 +0,0 @@ -name: Release docs -# checks are only on the draft directory because the release directory will be overwritten - -on: - push: - # tagged x.x.x releases as well as release candidates - tags: - - ?.?.?* - workflow_dispatch: - -# for security reasons the github actions are pinned to specific release versions -jobs: - export_pdf: - name: Export PDF - runs-on: ubuntu-24.04 - steps: - - name: Checkout markdown - uses: actions/checkout@v5.0.0 - - - name: Install python - uses: actions/setup-python@v6.0.0 - with: - python-version: 3.x - - - name: Install python packages - run: | - python -m pip install --upgrade pip setuptools wheel - pip install mkdocs - pip install mkdocs-material - pip install mkdocs-open-in-new-tab - pip install mkdocs-with-pdf - - - name: Build - run: mkdocs build - - - name: Upload PDF - uses: actions/upload-artifact@v4.6.2 - with: - name: 'pdf-export' - path: 'site/OWASP_Developer_Guide.pdf' - - draft_release: - name: Create draft release - runs-on: ubuntu-24.04 - needs: [export_pdf] - steps: - - name: Check out - uses: actions/checkout@v5.0.0 - - - name: Fetch prepared SBOM artifacts - uses: actions/download-artifact@v5.0.0 - with: - name: 'pdf-export' - path: 'site/OWASP_Developer_Guide.pdf' - - - name: Prepare release notes - run: | - releaseVersion=${{ github.ref_name }} - sed -e s/x.x.x/${releaseVersion:1}/g .release-note-template.md > ./release-notes.txt - - - name: Create release notes - uses: softprops/action-gh-release@v2.3.3 - with: - draft: true - name: "${releaseVersion:1}" - append_body: true - body_path: ./release-notes.txt - generate_release_notes: true - files: | - site/OWASP_Developer_Guide.pdf diff --git a/.gitignore b/.gitignore deleted file mode 100644 index b7b756bd..00000000 --- a/.gitignore +++ /dev/null @@ -1,61 +0,0 @@ -# uses allow-list, so ignore everything -* - -# project files -!.lintcheck.yaml -!.lycheeignore -!.markdownlint.yaml -!.spellcheck*.yaml -!.wordlist*.txt -!mkdocs*.yaml -!CNAME -!*.md -!license.txt - -# allow github, workflows and templates -!.github/ -!.github/*.yaml -!.github/issue_template/ -!.github/issue_template/*.md -!.github/workflows/ -!.github/workflows/*.yaml -!.gitignore - -# docs site -!docs/ -!docs/index.md -!docs/assets/ -!docs/assets/images/ -!docs/assets/images/*.png -!docs/assets/images/logos/ -!docs/assets/images/logos/*.png -!docs/en/ -!docs/en/index.md -!docs/en/**/ -!docs/en/**/*.md -!docs/es/ -!docs/es/index.md -!docs/es/**/ -!docs/es/**/*.md -!docs/fa/ -!docs/fa/index.md -!docs/fa/**/ -!docs/fa/**/*.md -!docs/hi/ -!docs/hi/index.md -!docs/hi/**/ -!docs/hi/**/*.md -!docs/pt-br/ -!docs/pt-br/index.md -!docs/pt-br/**/ -!docs/pt-br/**/*.md -!docs/fa/ -!docs/fa/index.md -!docs/fa/**/ -!docs/fa/**/*.md -!docs/CNAME - -# ignore symbolic links -docs/license.txt -docs/code_of_conduct.md -docs/contributing.md diff --git a/.lycheeignore b/.lycheeignore deleted file mode 100644 index ab13e9cf..00000000 --- a/.lycheeignore +++ /dev/null @@ -1,36 +0,0 @@ -# ignore these false positives from the link checker housekeeper - -# some sites that are examples only, no intention of being real -myfriend.site.com/ - -# Lockheed Martin has trouble with SSL certificates, temporarily ignore -www.lockheedmartin.com - -# github gets upset if too many requests are made to create new issues -github.com/OWASP/DevGuide/issues/new -github.com/OWASP/DevGuide/pulls - -# at times github gets upset full stop -github.com - -# ignore LINDDUN site because it occasionally times out -www.linddun.org/ - -# automated access to esapi is forbidden -mvnrepository.com/artifact/org.owasp.esapi/esapi - -# do not harass dockerhub -hub.docker.com/r/bkimminich/juice-shop -hub.docker.com/r/pygoat/pygoat -hub.docker.com/r/owasp/threat-dragon/tags -hub.docker.com/r/securityrat/securityrat -hub.docker.com/r/webgoat/webgoat - -# Google drive tends to need permissions that the link checker does not have -drive.google.com/ - -# SAMM training site blocks automated access -owaspsamm.thinkific.com/courses/samm - -# the BLT site blocks bots -owaspblt.org diff --git a/.markdownlint.yaml b/.markdownlint.yaml deleted file mode 100644 index bbff44d4..00000000 --- a/.markdownlint.yaml +++ /dev/null @@ -1,17 +0,0 @@ ---- -no-trailing-punctuation: false -no-inline-html: false -first-line-heading: false -link-fragments: false - -# MD013 - Line length -MD013: - code_block_line_length: 125 - code_blocks: true - heading_line_length: 100 - headings: true - line_length: 125 - stern: true - strict: false - tables: true - diff --git a/.nojekyll b/.nojekyll new file mode 100644 index 00000000..e69de29b diff --git a/.spellcheck-en.yaml b/.spellcheck-en.yaml deleted file mode 100644 index a0f8c78e..00000000 --- a/.spellcheck-en.yaml +++ /dev/null @@ -1,22 +0,0 @@ -matrix: -- name: Markdown - aspell: - lang: en - d: en_US - dictionary: - wordlists: - - .wordlist-en.txt - output: wordlist.dic - encoding: utf-8 - pipeline: - - pyspelling.filters.markdown: - - pyspelling.filters.html: - comments: false - ignores: - - code - - pre - sources: - - 'docs/en/**/*.md' - - 'docs/*.md' - - '*.md' - default_encoding: utf-8 diff --git a/.spellcheck-es.yaml b/.spellcheck-es.yaml deleted file mode 100644 index ec509e71..00000000 --- a/.spellcheck-es.yaml +++ /dev/null @@ -1,20 +0,0 @@ -matrix: -- name: Markdown - aspell: - lang: es - dictionary: - wordlists: - - .wordlist-es.txt - output: wordlist.dic - encoding: utf-8 - pipeline: - - pyspelling.filters.markdown: - - pyspelling.filters.html: - comments: false - ignores: - - code - - pre - sources: - - 'docs/es/**/*.md' - - 'docs/es/*.md' - default_encoding: utf-8 diff --git a/.spellcheck-pt-br.yaml b/.spellcheck-pt-br.yaml deleted file mode 100644 index c97d4065..00000000 --- a/.spellcheck-pt-br.yaml +++ /dev/null @@ -1,20 +0,0 @@ -matrix: -- name: Markdown - aspell: - lang: pt_BR - dictionary: - wordlists: - - .wordlist-pt-br.txt - output: wordlist.dic - encoding: utf-8 - pipeline: - - pyspelling.filters.markdown: - - pyspelling.filters.html: - comments: false - ignores: - - code - - pre - sources: - - 'docs/pt-br/**/*.md' - - 'docs/pt-br/*.md' - default_encoding: utf-8 diff --git a/.wordlist-en.txt b/.wordlist-en.txt deleted file mode 100644 index 837786d6..00000000 --- a/.wordlist-en.txt +++ /dev/null @@ -1,565 +0,0 @@ -ACM -AEAD -AES -APIT -APIs -APK -ARP -ASVS -AUTH -Adoptium -Amauri -Analyser -Andra -Andreas -AngularJS -AppArmor -AppSec -AppSensor -Arithmatex -Atlassian -BOLA -BOM -BOMs -BOPLA -BOV -BetterEm -Bizerra -Bluesky -Brømsø -CAPEC -CCM -CEC -CFB -CISO -CMS -CMSeeK -COE -CP -CPE -CRL -CRS -CSP -CSPRNG -CSRF -CSRFGuard -CSV -CTF -CVE -CVEs -CVSS -CWE -Canonicalisation -Cavalcanti -ChaCha -ChartMuseum -Cheatsheet -Cheatsheets -ClickJacking -Clickjacking -CodeQL -Copi -Coraza -Crackmes -Cryptographic -Customizable -CycloneDX -DAST -DCT -DES -DNS -DOM -DPO -DRM -DSS -DefectDojo -DevGuide -DevOps -DevSecOps -Diffie -DoS -DocX -DockerHub -Dojo -Don'ts -Dont's -DotNet -DrHEADer -Dracon -ECB -EE -ENISA -ESAPI -Ebihara -Ecommerce -Elie -EscapeAll -Exploitability -FIPS -FV -Flaxman -GCM -GCP -GDPR -GHSL -GRC -GRPC -Gasteratos -GitHub -Gitleaks -Gradle -GraphQL -Graphviz -HAPI -HAProxy -HBOM -HMAC -HSM -Haan -Happe -IAM -IAST -IDOR -IIS -IPC -InlineHilite -Istio -JA -JDK -JEA -JIRA -JIT -JSON -JSONP -JSP -JSR -JWA -JWKS -JWT -JWTs -Janca -JavaEE -JavaScript -Johan -Joomla -KDF -KMS -Katana -Keyczar -Kube -Kubeaudit -Kubernetes -Kulkarni -LDAP -LF -LFD -LINDDUN -LINNDUN -LLM -LSMs -Laravel -Lezza -LifeCycle -Lifecycle -MACs -MASTG -MASVS -MASWE -MBOM -MITRE -MITRE's -MOBI -MSTG -MacOS -Macdonald -MagicLink -Matteo -Microservices -Misconfiguration -MLSec -ModSecurity -Multifactor -NIST -NVD -Namespaces -Ncrack -Nettacker -Nginx -Nikto -Nmap -NoSQL -Node.js -NodeJS -NuGets -OAuth -OBOM -ODF -OFB -OOXML -OSHP -OSS -OTMP -OWASP -OWASP's -OWTF -Okta -Oliveira -OpenAPI -OpenCRE -OpenID -OpenJDK -PCI -PDFs -PDR -PID -PIDs -PKI -PKIX -PRNG -PathConverter -PlantUML -Playbook -Porreca -ProgressBar -PyGoat -PyPi -PySpelling -PyYAML -Pythonic -README -RRA -RSA -RansomWare -Recx -Riccardo -Roxana -Ruleset -SAFEcode -SAML -SAMM -SAMMwise -SAST -SBOM -SBOMs -SBT -SCA -SCM -SCP -SDA -SDC -SDLC -SDLCs -SECCOMP -SELinux -SFL -SIEM -SKF -SL -SLD -SMS -SNYK -SPOA -SSDLC -SSL -SSLyze -SSO -SSP -SSRF -SSV -SVG -SaaSBOM -Saad -SamuraiWTF -SaneHeaders -Screenshooter -SecurityCAT -SecurityHeaders -SecurityRAT -Sehgal -Semgrep -Serverless -Shiro -Shostack -Shostack's -Shruti -Skipenes -SmartSymbols -Sonatype -Spyros -Starov -StripHTML -SuperFences -Sydseter -Symfony -TCP -TLS -TOCTOU -TPM -TPS -Tasklist -Tesauro -Threagile -Tink -ToC -Trivy -TrustWave -UEFI -UI -URDP -UTF -UUID -UnCrackable -Unvalidated -VDR -VM -VPN -VPNs -VSD -VWAD -Vandana -VerSprite -VerSprite's -Verma -VirtualBox -Volkman -VulnDB -WAF -WASM -WEBDav -WHATWG -WPScan -WSTG -Wayfinder -WebDAV -WebGoat -WebGoat's -WebHook -WebSQL -WebView -WebWolf -Whatweb -Wordlist -Wordpress -WrongSecrets -XML -XSS -XXE -YAML -Yuuki -ZH -aSemy -ai -algorithmically -alirezakkt -allowlist -angularjs -api -architected -asvs -backdoors -backend -backrefs -baselining -blt -br -bracex -bruteforcing -caddy -canonicalization -centric -cgroup -cgroups -cheatsheets -checksums -chrooted -ciphertext -clickjacking -codebox -codefences -config -coraza -crs -crypto -cryptographic -cryptographically -cryptosystems -csp -csrf -csrfguard -customizable -cyber -cybersecurity -cybersquatting -cyclonedx -dast -dataflow -dataflows -de -declutter -decrypt -decrypts -deduplication -defacto -defectdojo -deliverables -dependabot -deserialization -deserialize -deserializes -deserializing -dev -devguide -devsecops -devsite -doggo -dojo -donts -dracon -ePub -eXchange -edumco -encodings -endif -enum -eop -esapi -executables -exfiltrate -exfiltration -facelessuser -faq -ffuf -filesystem -frontend -frontends -gamification -gamifies -gamify -git -github -gitlab -gmail -golang -hardcode -hostnames -hsecscan -html -http -https -iFrame -incrementing -integrations -intel -interoperate -io -ip -iteratively -javascript -js -json -kali -kalikali -katana -kubernetes -lifecycle -lifecycles -linddun -linter -linters -linux -localhost -lxml -lychee -mastg -maswe -misconfiguration -mlsec -mitigations -modsecurity -modularized -namespace -namespaces -nettacker -nightlies -nist -npm -opencre -oshp -owasp -owtf -pandoc -parameterization -parsers -pentesters -pentesting -permalink -personalization -plaintext -pre -printf -programmatically -proscriptive -px -pygoat -pymdown -pyspelling -pytm -rebranding -referer -remediations -repo -roadmap -runtime -runtimes -samm -samuraiwtf -sanitization -sbates -scalability -scalable -schemas -scp -seclang -secureCodeBox -serializer -sexualized -skf -socio -soupsieve -stacktrace -strcat -strcpy -subcommand -subcommands -subdirectories -subdirectory -svn -synchronizer -templating -testbed -testssl -threatspec -toolchain -transactional -tunable -txt -typosquatting -unencrypted -unforgeable -unicode -unkeyed -unmanaged -untrusted -url -userland -waf -wcmatch -webapp -webgoat -weightage -writeups -wrongsecrets -wstg -wtf -www -xsaero \ No newline at end of file diff --git a/.wordlist-es.txt b/.wordlist-es.txt deleted file mode 100644 index 737ccddc..00000000 --- a/.wordlist-es.txt +++ /dev/null @@ -1,544 +0,0 @@ -AAA -accederse -Adoptium -AES -ai -AJAX -algorítmicamente -align -amass -Amass -Analyser -Analysis -and -And -Android -Ant -API -APIs -APIT -Application -ARC -Assurance -ASVS -Atlassian -Attack -audit -AUTH -automatizable -Bean -Benchmark -Bill -bin -BOM -BOMs -BOV -Breaker -búfer -búferes -Buffers -Builder -canonicalización -CAPEC -catch -categorizarse -CBC -CD -CFB -ChartMuseum -Chat -Cheat -Check -CI -CIA -Clickjacking -Clobbering -clústeres -CMS -CMSeeK -code -Code -CODE -com -Common -Compartmentalization -compose -Composition -concientiza -confiabilidad -Connect -contextualmente -contramedidas -Contras -cookie -cookies -CPE -Credential -criptográficamente -criptosistemas -Cross -crypto -CRYPTO -csp -CSRF -CSRFGuard -CSS -cstm -CSV -CTR -CVE -CVEs -CVSS -CWE -Cyber -CycloneDX -dashboard -DAST -Database -db -deduplicación -Defect -DefectDojo -Dependency -desactualizadas -desactualizado -Desactualizados -descargable -desencriptación -desencriptan -desencriptar -deserializa -deserialización -Deserialización -deserializan -despues -development -DevOps -DevSecOps -diagramación -diagramática -diagramáticos -DIE -Diffie -Django -DNS -docker -Docker -DockerHub -DocX -doggo -Dojo -DOM -DoS -dot -DotNet -Dragon -DrHEADer -DRM -DSS -DVDs -Dynamic -ECB -Elevation -Elie -Encoder -encripta -encriptación -Encriptación -encriptada -encriptado -encriptan -encriptándolo -end -engagements -Enterprise -enum -enumeracion -Enumeration -ePub -ESAPI -escalación -escaneos -evaluator -Exchange -exploit -Exploit -Exploitability -exploits -Explotabilidad -Exposure -facto -ffuf -findings -FIPS -firewall -Flagship -Flow -for -Fortify -framework -Framework -frameworks -Frameworks -frontend -gamifica -gamificación -Gasteratos -GDPR -Gestionabilidad -Git -github -GitHub -gitlab -Gitleaks -Go -Gobernanza -Google -Gradle -granularidad -GraphQL -Graphviz -GRC -Group -guide -Hack -hackers -HAPI -hard -hash -hashes -Hashes -HBOM -Headers -Hellman -Helm -HOja -hsecscan -html -HTML -HTTP -HTTPS -humble -Hunter -IAM -IAST -IDOR -image -information -Integration -intel -Interactive -interoperabilidad -interoperan -iOS -issue -IV -Janca -jar -JAR -JavaEE -Javascript -JDK -Jenkins -Joomla -js -JSON -JSR -Juice -JWT -Kali -KDF -Keyczar -Knowledge -Kube -Kubeaudit -Kubernetes -Ladders -Laravel -LDAP -leaks -learning -left -Left -LFD -library -LINDDUN -Link -Lockheed -Low -Machine -MacOS -MACs -Main -malware -Manejabilidad -mapeos -markdown -Markdown -MASTG -MASVS -MASWE -Materials -Matt -Maturity -Maven -MBOM -merges -metadatos -MFA -Microservicios -Microsoft -ML -MOBI -Mobile -model -Model -Modeling -modularizada -monitorear -Monitorear -monitoreo -Monitoreo -Mozilla -MSTG -multi -Multi -Multifactor -multiplataforma -Ncrack -Nettacker -NETWORK -newpage -Nexus -Nikto -NIST -Nmap -Node -NodeJS -NoSQL -Nótese -NPM -Nuclei -NVD -OAuth -OBOM -Observatory -of -Of -OFB -Offensive -on -Open -OpenAPI -OpenCRE -OpenID -OpenJDK -org -organizacional -organizacionales -originadora -OSHP -OSS -OTMP -OWASP -OWTF -pandoc -parametrización -Parametrización -parametrizadas -parchar -PCI -PDF -pentesters -PHP -pipelines -PKI -PlantUML -Platform -PLATFORM -PLOT -plugin -Plugin -plugins -practical -precompiladas -preregistrada -prevenibles -priorización -PRIVACY -Privileges -proactivamente -proactivo -Proactivo -proactivos -Proactivos -programáticamente -Project -Protocol -Proxy -pull -Purple -python -Python -Pythónico -pytm -Pytm -Rails -RansomWare -RC -reautenticación -Recx -reelaborada -ref -refactorización -referenciado -regulatorios -releases -remediación -Remediación -remediaciones -Repo -Request -requests -RESILIENCE -resiliencia -REST -right -RRA -RSA -Ruby -Rust -Saad -SaaSBOM -salt -SAML -SAMM -sandbox -sanitización -Sanitización -sanitizadas -Sanitizer -SAST -SBOM -SBOMs -SBT -SCA -Scan -Scanner -SCP -Screenshooter -script -scripts -SDLC -Secure -secureCodeBox -security -Security -SecurityCAT -SecurityHeaders -SecurityRAT -Semgrep -serializados -Serverless -sh -Sheets -Shepherd -shift -Shift -Shiro -Shop -Shostack -sincronizador -site -Site -SKF -Slack -Snakes -Sonatype -Spotlight -Spring -Spyros -SQL -SSDLC -SSH -SSL -SSLyze -SSO -SSRF -stack -Standards -Static -STORAGE -STRIDE -Stuffing -sub -subcomandos -subdominios -Symfony -tamano -tambien -TAME -Tanya -teams -Teams -testeadores -Testing -testssl -The -Threagile -threat -Threat -threatspec -Tink -tipadas -TLS -to -Tool -Top -TPM -Track -Trivy -try -tutorial -Typo -Ubuntu -UE -UEFI -unicode -URL -URLs -usabilidad -Usabilidad -UTF -UUID -Validation -VDR -Version -VerSprite -VEX -video -VM -VPN -VPNs -Vulnerability -Wayfinder -We -WebGoat -Whatweb -WHATWG -width -wiki -Wikipedia -Windows -Word -Wordpress -Worldwide -WPScan -WSTG -XML -XS -XSS -XXE -YAML -ZAP -Zed diff --git a/.wordlist-pt-br.txt b/.wordlist-pt-br.txt deleted file mode 100644 index 31a66b15..00000000 --- a/.wordlist-pt-br.txt +++ /dev/null @@ -1,90 +0,0 @@ -AAA -align -and -API -Application -Applications -Assurance -Body -bugs -Cascading -Cheat -Clickjacking -Clobbering -Consortium -Content -Controls -Credential -Cross-site -CSS -CWE -Cyber -Database -Deserialization -DevOps -DoS -Exploit -exploits -firewall -frameworks -GitHub -Headers -HTML -image-right-small -Injection -issue -JSON -JWTs -Knowledge -Language -Large -LDAP -leaks -Living -LLM -Low-Code -Model -NIST -No-Code -Of -Open -OpenCRE -our -OWASP -path -Policy -Privacy -Proactive -Project -queries -right -Risks -SAMM -Schools -scripts -Securing -Security -Serverless -Sheet -Sheets -SQL -SSRF -Standard -Strict -Stuffing -Style -Ten -The -Token -Transport -traversal -upload -Upload -URLs -VPN -Wayfinder -WHATWG -width -Worldwide -XSS -XXE diff --git a/404.html b/404.html new file mode 100644 index 00000000..225007d4 --- /dev/null +++ b/404.html @@ -0,0 +1,7061 @@ + + + +
+ + + + + + + + + + + + + + + + + + +