FSEstyle

Description: If you passed the OSCP and finally got the certification then that means that you tried hard!

Description: Bug bounty programs are one of the ways to combat zero day vulnerabilities by finding any flaws on the application or system before the bad guys.

Description: Tired of explaining that a hash cannot be decrypted? Then this funny design is absolutely for you. Just end up any discussions before they start with this design!

Description: If you passed the OSEP and finally got the certification, then you deserve this recognition and means that you tried hard again.

Description: A funny design to remind that a random string called salt needs to be used when storing passwords as a hash. This avoids any malicious actor to easily find out which is the password with pre-calculated hashes.

Description: A funny reference to a well known film but with CISSP and OSCP certifications.

Description: This is one of the best practice which is a must when developing any web server that provides cookies. With the secure flag assigned on cookies, it will only be transferred through HTTPS.

Description: The best practice in terms of giving permissions or authorisation to access an asset is to do it through roles instead of assigning the permissions directly to the user.

Description: HTTPOnly flag for cookies should be a must. This avoids other unwanted usages of cookies from your browser like scripts and only restricts its usage for HTTP.

Description: The nmap tool normally is one of the first tools you use to assess the security of your network. So no nmap means no fun.

Description: A funny design about the fact that cybersecurity professionals need to be somewhat crazy to love their job.

Description: A quote design of a true statement about cybersecurity. Without logs you cannot detect properly any attack attempts hence respond upon.

Description: One of the best practices stated in OWASP is to allow only to use local static DTD when processing XML to avoid XXE attacks.

Description: Funny design about the bad practice of sharing passwords in clear text over email, messaging applications and ticketing systems. They should be shared through a password management tool or one time secret applications.

Description: The design is about one of the guidelines provided by OWASP, to put in place security measures to restrict the import or usage of packages with known vulnerabilities.

Description: Design about one of the ways that bad guys may use to compromise a target organisation network. If macros or scripts are allowed generally in office documents, then they could potentially use them to execute malware if one of the employees clicks or opens anything evil in a phishing email. A complete headache for cybersecurity team.

Description: Normally, any authentication through a website is done through HTTP POST method since a form is needed with login information. This could minimise the risk of disclosing the credentials when your browser stores the URL in plan text or even being written in logs on the server side.

Description: One of the ways to reduce the risk is to limit the impact in case of compromise so practicing least privilege is the way.

Description: No matter how much controls or how good they are, the malicious actors will attempt to bypass them with phishing to attack the weakest part of security, the human.

Description: Threat modeling should be a mainstream activity for every current and new designs to better understand which could be the threats and which could be the security measures to mitigate the risk.

Description: Insecure deserialisation could lead to remote code execution if no proper validation is done previously.

Description: A good practice is to periodically clearing cookies, cache and temporal files from the browser. It might contain trackers that will disclose information from your browsing habits.

Description: It is really important to concern coworkers to not plug any lost USB pendrive in any device. They are suspicious, cannot be trusted and potentially could trigger malware and infect the entire network.

Description: No matter it is external network or internal network authenticate, always authenticate any access to sensitive information. The principle of Zero trust.

Description: One of the things that a Cybersecurity professional have to understand is that users might don't tell the truth or they don't know what harm caused due to their actions. So logs and SIEM could clarify what happen really because they tell don't lie.

Description: HSTS is a must when it comes to securing web application HTTPS connections. So, if there is no HSTS header, no deal.

Description: Awareness design to remind the importance of validating zip files before decompressing it like limiting the number of files, the decompressed size and a maximum decompressed file size.

Description: An awareness slogan for your organisation to concern your coworkers to stop writing down passwords in physical notes or notepad.

Description: Running non-core processes or services in Linux is not safe at all and could facilitate hackers to privilege escalation. This awareness slogan should concern Linux administrators to be careful with such practices.

Description: A motivational quote for cybersecurity professionals to defend harder their organisation network because the adversary will try hard. Never underestimate the attacker.

Description: Funny design of hashcat tool in a pun form. Hashcat the hash!

Description: IT operation should be really careful when dealing with domain administrators. The best practice is that it should be only one per domain otherwise, it could be a nightmare to manage.

Description: A reminder for developers to review commented code and take care of it to avoid disclosing secrets or giving hints to a malicious actor. After all secure coding.

Description: A security funny awareness design to remind developers that secrets, passwords or api tokens is not a good practice.

Description: An awareness design to tell your peer developers to implement input validation to prevent injection, buffer overflows, denial of service or even log sanitisation.

Description: Dark background version of a minimalistic design for threat hunters, a specialized cybersecurity profiles which analyzes and deploys new ways of detecting threats in the organization network.