AppSec
Volunteering
-
OWASP API Security Project
(GitHub)
- OWASP API Security Top 10
- OWASP Go Secure Coding Practices Guide (GitHub)
-
OWASP Top Ten
(GitHub)
- 2017 Edition: English, Português (Portugal)
- OWASP Cheat Sheet Series (GitHub)
-
OWASP Secure Coding Practices - Quick Reference Guide
- v2 (Stable): English, Português (Portugal)
Educational Materials
-
OWASP Top 10 Security Fundamentals (EC-Council Course)
The Hands-on Approach to Master the Ten Most Critical Web Application Security Risks
- Kotlin Secure Coding Practices (GitHub) + Goatlin (aka Kotlin Goat)
- JavaScript Secure Coding Practices
Ethical Hacking (at least public ones)
Talks, Publications & Presentations
- OWASP API Security Top 10: from attackers' perspective - OWASP Lisboa Meetup
- GraphQL: great flexibility, new attack vectors - {api:world} 2022
- Evolution of the OWASP API Security Top 10 - apisecure 2022
- API (in)Security TOP 10: Guided tour - DEF CON 28SM AppSec Village
- BSides Lisbon 2017 - Crafting the next-generation Man-in-the-Browser Trojan
- A Race Condition in Kubernetes (PoC Video, Discussion, Pull Request by Lubomir I. Ivanov)
- Solidity and Smart Contracts from a Security Standpoint
- Solidity Top 10 Common Issues
- OWASP Top 10 - Checkmarx Presentation at Polytechnic Institute of Cávado and Ave