Weakness Mugs

HTTPOnly flag for cookies should be a must. This avoids other unwanted usages of cookies from your browser like scripts and only restricts its usage for HTTP.

A reminder for developers to review commented code and take care of it to avoid disclosing secrets or giving hints to a malicious actor. Black background with white letters design.

APP Security Engineer is a Cool design of this role tittle. If you are this kind of cybersecurity professional, your duty is to reduce the risk as much as possible in code and dependencies. Also you'll enact activities like threat modelling, malware scanning, secure coding practices and correct secret management. This is a design version with black background.

A design about the the common weakness enumeration 79 represented in an iconic way. Good for secure coding guideline and awareness to avoid being vulnerable to XSS attacks.

Get this new print for a limited time!

Rest if for the weak so get up and go do something...

In the world of insecurity, fear and aggression,it's become normal to be meek...But..Meekness is not my Weakness

This should be the input validation steps that the code must do to avoid processing harmful untrusted data.

This design reminds to the developer the importance of using defensive copy instead of clone. It will reduce the risk of data compromise.

An awareness design to remind coworkers to don't leave unlocked their computers even for going to the toilet.

A cool and funny way to remind one of the OWASP guidelines, the A6:2021 vulnerable and outdated components. This design will guide your developers to follow the best practices and mitigate the risks of using any vulnerable or old dependencies in the software.

Insecure deserialisation could lead to remote code execution if no proper validation is done previously.

In case that x-powered-by header is delivered by your service, override it with misleading information to make attackers life harder like "Not Your Business 1.0"

Never fight the power but embrace it. It is the weakness often from within that is the true enemy!

HSTS is a must when it comes to securing web application HTTPS connections. So, if there is no HSTS header, no deal.

The design is about one of the guidelines provided by OWASP, to put in place security measures to restrict the import or usage of packages with known vulnerabilities.

This should be the input validation steps that the code must do to avoid processing harmful untrusted data. This is a black background with white letters design version.

Get this new print for a limited time!

a cool comment on the character weakness of blaming others

embrace masculinity masculinity reject weakness strength bodybuilding zyzz toxic masculinity jordan peterson workout muscular bodybuilder

Get this new print for a limited time!

Besides input validation which avoids processing any untrusted data by the application, it is important to perform output validation when writing logs, not only to avoid disclosing any sensitive information but also to prevent local file inclusion attacks.

this is John Kreese quote

Toughen up!

Developers are under great pressure with aggressive delivering dates but, one of the most important things that they shouldn't overlook, is to applying input validation in the functions or methods.

At Eternity's Gate by Vincent Van Gogh with text

A cool and funny way to remind one of the OWASP guidelines, the A1:2021. This design will guide your developers to follow the best practices for broken access control.

To protect from file upload attacks on your website that could leave attackers to upload malicious software or backdoors, here's some of the protections to prevent such attacks.

This is one of the best practice which is a must when developing any web server that provides cookies. With the secure flag assigned on cookies, it will only be transferred through HTTPS.

Normally, any authentication through a website is done through HTTP POST method since a form is needed with login information. This could minimise the risk of disclosing the credentials when your browser stores the URL in plan text or even being written in logs on the server side.

Iconic artwork: At Eternity's Gate by Vincent van Gogh with text

That's weak sauce bro! Totally lame!

This is for the elitist Magic the gathering players or any CCG for that matter.

This is for the elitist Magic the gathering players or any CCG for that matter.

For that person who is always looking for wifi, or that phone which always has weak wifi connection.

AOYMA store´s main aim is to help you to find more in less by subtracting the obvious and adding the meaningful.