Zap T-Shirts

Shih Tzu Pen and Ink

Zap Cat meets new friends

This should be the input validation steps that the code must do to avoid processing harmful untrusted data.

Astronaut Exploring the Unknown

zap! musquito racket

Celebrate The American Gladiators with this shirt!

Old Fashioned Sloth in the style of 1970's Underground Comix

Bigfoot in the style of 1970's underground comix

Here's a cheat sheet like design to remind some of the secure coding measures to prevent all kind XSS attacks: Reflective, Stored or DOM based. Failing to do so, will imply code execution on victim's browser when visiting your site.

French Bulldog in 1970's Underground Comix Style

While sitting in a booth at a restaurant I looked up and decided this would make a cool shot. I hope you enjoy it as much as I do.

Yeti Under a Full Moon in 1970's Underground Comix Style

Chihuahua in Pen and Ink

Want to avoid the undesired clickjacking attack on your website? Then X-Frame-Options should be one of the headers to respond with sameorigin value. Or you can make it even more restrictive with deny. The result is avoiding any eventual attacker to use hidden frames to compromise the website user. This is a black background with white letters design version.

A spiky skull sporting a pretty cool gold tooth.

Lightning Bolt Pattern

Lightning Bolt Pattern

Lightning Bolt Pattern

Zap!- A pop art, comic book style, cartoon text burst design, with classic retro-style, typeface, action fonts, and letters.

Buzzer Beater

quick pint never hurt anyone

HTTPOnly flag for cookies should be a must. This avoids other unwanted usages of cookies from your browser like scripts and only restricts its usage for HTTP. Black background with white letters design version.

This is one of the best practice which is a must when developing any web server that provides cookies. With the secure flag assigned on cookies, it will only be transferred through HTTPS. Black background with white letters design version.

HSTS is a must when it comes to securing web application HTTPS connections. So, if there is no HSTS header, no deal. This is a black background with white letters design.

HTTPOnly flag for cookies should be a must. This avoids other unwanted usages of cookies from your browser like scripts and only restricts its usage for HTTP.

Want to avoid the undesired clickjacking attack on your website? Then X-Frame-Options should be one of the headers to respond with sameorigin value. Or you can make it even more restrictive with deny. The result is avoiding any eventual attacker to use hidden frames to compromise the website user.

HSTS is a must when it comes to securing web application HTTPS connections. So, if there is no HSTS header, no deal.

This is one of the best practice which is a must when developing any web server that provides cookies. With the secure flag assigned on cookies, it will only be transferred through HTTPS.

In case that x-powered-by header is delivered by your service, override it with misleading information to make attackers life harder like "Not Your Business 1.0". This is a black background with white letters design.

Normally, any authentication through a website is done through HTTP POST method since a form is needed with login information. This could minimise the risk of disclosing the credentials when your browser stores the URL in plan text or even being written in logs on the server side.

"Zap Ploik Ding" Arcade gamer cat shirt of Dustin.

In case that x-powered-by header is delivered by your service, override it with misleading information to make attackers life harder like "Not Your Business 1.0"

If you passed the OSWE and finally got the certification, then congrats! Reward yourself this design which means that you have tried hard again.

A pixel version of a 1930s tintoy raygun

Picking up strays! Zap Cat has some questions for the dominant species of our planet. And yes, people of Shreveport, he is here! Be on the lookout! He better hear good reports of all the kitty servants giving extra snacks, or he might start a riot.

A design about the the common weakness enumeration 89 represented in an iconic way. Good for secure coding guideline and awareness to avoid being vulnerable to sql injection attacks.