Owasp Mugs

A cool and funny way to remind one of the OWASP guidelines, the A3:2021. This design will guide your developers to follow the best practices to avoid Injections on code no matter it is LDAP, XML, SQL, Command and so on.

APP Security Engineer is a Cool design of this role tittle. If you are this kind of cybersecurity professional, your duty is to reduce the risk as much as possible in code and dependencies. Also you'll enact activities like threat modelling, malware scanning, secure coding practices and correct secret management.

Any input that is controllable by the user is susceptible of being manipulated and turn it as an evil payload for remote code execution on the victim server. Black background design with white letters.

To mitigate the risk of supply chain attacks or other similar ones that implies malicious code being incorporated in the code, it is recommended to perform malware scanning to the dependencies before using them into your project.

A design about the the common weakness enumeration 79 represented in an iconic way. Good for secure coding guideline and awareness to avoid being vulnerable to XSS attacks.

If the web application is not properly implemented and it doesn't performs input validation correctly on login, then it could be bypassed by sql injection.

This should be the input validation steps that the code must do to avoid processing harmful untrusted data. This is a black background with white letters design version.

The design is about one of the guidelines provided by OWASP, to put in place security measures to restrict the import or usage of packages with known vulnerabilities.

A cool design with a black background and white letters about one of the web application threats, the cross site scripting or XSS. This kind of attack abuses the weakness of the site to deliver malicious code on clients browsers to steal your cookies or other harmful actions.

Want to avoid the undesired clickjacking attack on your website? Then X-Frame-Options should be one of the headers to respond with sameorigin value. Or you can make it even more restrictive with deny. The result is avoiding any eventual attacker to use hidden frames to compromise the website user.

A black background with white letters design version about one of the guidelines provided by OWASP, to put in place security measures to restrict the import or usage of packages with known vulnerabilities.

This is one of the best practice which is a must when developing any web server that provides cookies. With the secure flag assigned on cookies, it will only be transferred through HTTPS. Black background with white letters design version.

The best practice is to disable external entities on XML, otherwise, it will be the door for different type of attacks like the Billion Laughs. A cool black background version design with white letters.

The Open Systems Interconnection model is a conceptual model that characterises and standardises the communication functions of a telecommunication or computing system without regard to its underlying internal structure and technology

Fuzzing is an important testing to be done on running applications because it can catch flaws that static analysis can't like buffer overflows or memory corruption. This is a black background with white letters design version.

Here's a cheat sheet like design to remind some of the secure coding measures to prevent all kind XSS attacks: Reflective, Stored or DOM based. Failing to do so, will imply code execution on victim's browser when visiting your site.

A design made for providing guidance to CSRF attack prevention. If it is not prevented adequately, it may leave attackers to trigger undesired actions from victims' browser like performing inadvertent transactions on your website.

This design represents some of the security controls that you might want to put in place in order to practice layered defense. You may find TLS, secure coding, IAM, pentesting, antispam and patching.

A media access control address is a unique identifier assigned to a network interface controller for use as a network address in communications within a network segment. This use is common in most IEEE 802 networking technologies, including Ethernet, Wi-Fi, and Bluetooth.

A cool and funny way to remind one of the OWASP guidelines, the A6:2021 vulnerable and outdated components. This design will guide your developers to follow the best practices and mitigate the risks of using any vulnerable or old dependencies in the software.

This should be the input validation steps that the code must do to avoid processing harmful untrusted data.

OWASP is a foundation that provides trainings, guidelines and useful tools for cybersecurity professionals to make the internet a safe place.

DevSecOps is an approach to software development that integrates security into the DevOps process, with the goal of delivering secure, high-quality software at a faster pace. A minimalist DevSecOps design would involve a streamlined, focused approach to security, with an emphasis on simplicity and efficiency. This is a design version with black background.

A cool and funny way to remind one of the OWASP guidelines, the A5:2021 security misconfiguration. This design will guide your developers to follow the best practices and mitigate the risks of any default settings or credentials.

A cool and funny way to remind one of the OWASP guidelines, the A1:2021. This design will guide your developers to follow the best practices for broken access control.

A cool and funny way to remind one of the OWASP guidelines, the A2:2021. This design will guide your developers to follow the best practices for cryptographic failures.

Frase diseñada para divulgar y recordar a los programadores or programadoras la importancia de añadir validación de entrada a las funciones, y así evitar que los usuarios con malas intenciones puedan comprometer la aplicación.

Threat modeling should be a mainstream activity for every current and new designs to better understand which could be the threats and which could be the security measures to mitigate the risk.

A reminder for developers to review commented code and take care of it to avoid disclosing secrets or giving hints to a malicious actor. Black background with white letters design.

El diseño se trata de una de las recomendaciones del decálogo de buenas practicas de OWASP. Para entregar una aplicación con los mínimos riesgos de seguridad, es importante usar dependencias libres de vulnerabilidades.

A reminder for developers to review commented code and take care of it to avoid disclosing secrets or giving hints to a malicious actor. After all secure coding.

An awareness design to tell your peer developers to implement input validation to prevent injection, buffer overflows, denial of service or even log sanitisation.

A black background version with white letters of an awareness design to tell your peer developers to implement input validation to prevent injection, buffer overflows, denial of service or even log sanitisation.

APP Security Engineer is a Cool design of this role tittle. If you are this kind of cybersecurity professional, your duty is to reduce the risk as much as possible in code and dependencies. Also you'll enact activities like threat modelling, malware scanning, secure coding practices and correct secret management. This is a design version with black background.

This design reminds to the developer the importance of using defensive copy instead of clone. It will reduce the risk of data compromise.

This is a cool and funny design to wear or to show what a Cybersecurity Professional prefers most of the times: deny by default. If there is no way to access then it is not possible to compromise.