Total Pageviews

Monday, 13 April 2020

November 2019 Connector

OWASP
Connector
November 2019

COMMUNICATIONS


Letter from the Vice-Chairman

Dear OWASP Community, 

Preparation for next year's conferences is underway. I had the pleasure of meeting people from our community at a recent ISACA Ireland event where I had an OWASP stand. I also had lots of swag to give away, loads left which I plan to share out amongst the community. 

I was on a call recently with both WIA leadership and a number of individuals looking to broaden our diversity reach, forming DIA (diversity in AppSec). This was a positive call and I look forward to reviewing their proposal under the committee 2.0 operating model.

I'd like to thank our volunteers, chapter and project leaders for making OWASP what it is today. We wouldn't have a foundation without you. We always want to make things better, to this end, it would be great if you could fill out the following feedback form.

Thank you, 
Owen Pendlebury, Vice-Chairman

FROM THE EXECUTIVE DIRECTOR


As we wind down 2019, we are planning lots of new opportunities to get involved with OWASP next year. The current working draft of the 2020 Operating Plan can be found on our staging site for our new website which is planned to launch next month.
 
Some of the highlights for 2020:
  • Quarterly Town Hall meetings.
  • Two Project Summits - the first in February 2020
  • Pilot single-day AppSec Days worldwide to offer local training and community.
We are also set to further increase the transparency of the daily workings of OWASP through our Staff Projects page. The pages linked there will always be a work in progress; some of which today are still only templates but still a great resource to know what's going on at OWASP.

All of this which adds to our Global and Regional Events, ongoing local chapter support, and other member activities. Our plans are ambitious and we look forward to your continued support this and every month as we look to better secure the web.



OWASP Foundation Global AppSec Event Dates for 2020

Global AppSec Dublin, June 15 - 19, 2020
(Formerly known as AppSec EU)
Sponsorship is now available
Call for Papers & Call for Training December 2019
 
Global AppSec San Francisco, October 19 - 23, 2020
(Formerly known as AppSec US)
CFP &  CFT February 2020

** Visit our website for future announcements.**
NEW OWASP Project Summit - Winter 2020
February 2020 in Cancun, Mexico

 
The OWASP Foundation will host a three-day working session for FIVE selected projects in Cancun, Mexico, February 2020. Arrival day will be Wednesday the 19th and departures will be the 23rd. Projects must apply and then get selected to participate. The application process will require project meeting goals, work plans, key contributors, and expected attendance. The OWASP Foundation Officers Group will make the final selection. For more information click here

You can also email Emily Berman Global Events Director or Harold Blankenship Director of Technology and Projects.
Announcing a New Opportunity to become part of a Global AppSec Program Team
 
Conference Program Teams are constituted for each Global AppSec event and consists of members of OWASP members and staff. The selection of team members is based on subject-matter expertise and a balanced representation of the OWASP community. For planning purposes, team members shall reside on the continent of the Global AppSec for which they serve. Teams are constituted no later than six months prior to the Global AppSec event.

To apply to become a member of the Conference Program Team click here.


 
We are so excited to announce that both the London OWASP and WIA community have been asked to speak at BlackHat Europe 2019 on Wednesday 4 December at the EXCEL London.   Andra Lezza is leading the panel of women to "Share insights gained at different stages of their careers to help other women in the field."  Thank you, Andra, for leading the initiative and also to Sonya Moisset, Bibi Sanjarani, Katy Anton and Lauren Chiesa for volunteering to be part of the panel.  Also from the OWASP Community and a London Chapter Leader Sam Stepanyan and Paul Harragan.  Sam and Pau will be presenting a more in-depth demo on the OWASP Nettacker.  Good luck to all the speakers have a great conference.

I would like to encourage all of the OWASP community that will be attending BlackHat Europe to please make every effort to attend and support our fellow OWASP members Wednesday, 4 December 2019. (Click to view the schedule details.)

OWASP Members don't forget you are eligible for € 200.00 discount, email marketing@owasp.org for code to use when registering.


BlackHat Europe has extended an invitation to our London WIA community  to  lead a panel to "Share insights gained at different stages of their careers that could help other women in the field."  Thank you to Andra Lezza for leading this initiative and Sonya Moisset, Bibi Sanjarani, Katy Anton and Lauren Chiesa for volunteering to be part of the panel and to contribute.  Good luck I am sure your session will be a huge success.

BlackHat Europe 2019 London at EXCEL London
2019 December 2-5 
The OWASP Booth 1015
Business Hall December 4 & 5 
December 4, 10:30 AM - 7:00 PM
December 5: 10:00 AM - 4:00 PM

EVENTS 

You may also be interested in one of our other affiliated events:


REGIONAL EVENTS
Event DateLocation
German OWASP Day 2019 December 10, 2019 Karlsruhe, Germany
AppSec California 2020 January 21 - 24, 2020 Santa Monica, CA
OWASP New Zealand Day 2020 February 20 - 21, 2020 Auckland, New Zealand
OWASP Seasides March 3 - 5, 2020 Panjim Goa, India
SnowFROC 2020 March 5, 2020 Denver, CO
AppSec Morocco & Africa 2020 June 4 - 5, 2020 Rabat, Morocco

GLOBAL PARTNERSHIP EVENTS
Event Date Location
BlackHat Europe 2019 December 2 - 5, 2019 London

PROJECTS


As the foundation moves toward the migration of the OWASP web presence from the old wiki site to our new Github-hosted home, some of you may still have questions regarding what to move and how to move it. Essentially, if you have a chapter page or project page and you have not migrated it to the new website, that would be first. Steps on what to do and what is needed can be found at https://www2.owasp.org/migration There are also some minor instructions on the default project or chapter page itself. And if you are wondering where that page is located, you can go to https://github.com/OWASP and type your chapter name in the repository search bar. If your project or chapter is not there, contact me. Lastly, there are a number of excellent examples already done by other leaders (also linked on the migration page).

And, as a precaution, you should click over into the 'Settings' of your repository and then click the 'Collaborators & teams' link on the left menu and check to make sure that the usernames added to Collaborators match what you expect.  Having someone you do not know edit your web page without your knowledge is no longer the expected behavior.

Some resources, mostly for projects, have been uploaded to the OWASP Site Theme Repository and can be linked to via the /assets/image/common/<file> URL.

After your chapter or project page is done, there is a www-community repository which would include any files from the wiki that are not currently in a project or chapter or board/staff policy area.  For instance, there are pages there for GSoC and XSS and CSRF.  A list of the top pages that need to be migrated can be found attached to one of the TODO cards on our website migration Trello board which you are invited to join if you want to help migrate loose pages and/or perform some automation work.

Our current plan can be found on the Website Relaunch project page.

PROJECT ANNOUNCEMENT

As part of OWASP's participation in Google's Season of Docs, the ZAP project has had Nirojan Selvanathan (@sshniro)  working on API documentation.  The first iteration of the documentation is now live.  It includes Java, Python, and shell
example snippets all presented in a responsive and accessible design which we will continue to build on in the future.

Big thanks to Nirojan for his efforts on this wonderful initiative!
Congratulations and thanks to Google Open Source for helping to bring the open-source and technical writer communities together!

COMMUNITY

 
Welcome to our New OWASP Chapters

Colombo, Sri Lanka
Des Moines, IA
Harrisburg, PA
Louisville, KY
Monterrey, Brazil
Moscow, Russia


 
Contributor Corporate Members
 

 
*Ads and logos are not endorsements and reflect the messages of the advertiser only. *
Join us
Donate
Our mailing address is:
OWASP Foundation 
1200-C Agora Drive, #232
Bel Air, MD 21014  
Contact Us
Unsubscribe






This email was sent to *|EMAIL|*
why did I get this?    unsubscribe from this list    update subscription preferences
*|LIST:ADDRESSLINE|*

FOOTPRITING AND INFORMATION GATHERING USED IN HACKING

WHAT IS FOOTPRITING AND INFORMATION GATHERING IN HACKING?

Footpriting is the technique used for gathering information about computer systems and the entities they belongs too. 
To get this information, a hacker might use various tools and technologies.

Basically it is the first step where hacker gather as much information as possible to find the way for cracking the whole system or target or atleast decide what types of attacks will be more suitable for the target.

Footpriting can be both passive and active.

Reviewing a company's website is an example of passive footprinting, 
whereas attempting to gain access to sensititve information through social engineering is an example of active information gathering.

During this phase hacking, a hacker can collect the following information>- Domain name
-IP Addresses
-Namespaces
-Employee information 
-Phone numbers
-E-mails 
Job information

Tip-You can use http://www.whois.com/ website to get detailed information about a domain name information including its owner,its registrar, date of registration, expiry, name servers owner's contact information etc.

Use of  Footprinting & Information Gathering in People Searching-
Now a days its very easy to find anyone with his/her full name in social media sites like Facebook, Instragram,Twitter,Linkdedin to gather information about date of birth,birthplace, real photos, education detail, hobbies, relationship status etc.

There are several sites like PIPL,PeekYou, Transport Sites such as mptransport,uptransport etc and Job placement Sites such as Shine.com,Naukari.com , Monster.com etc which are very useful for hacker to collect information about anyone.  
Hacker collect the information about you from your Resume which you uploaded on job placement site for seeking a job as well as  hacker collect the information from your vehicle number also from transport sites to know about the owner of vehicle, adderess etc then after they make plan how to attack on victim to earn money after know about him/her from collecting information.




INFORMATION GATHERING-It is the process of collecting the information from different places about any individual company,organization, server, ip address or person.
Most of the hacker spend his time in this process.

Information gathering plays a vital role for both investigating and attacking purposes.This is one of the best way to collect victim data and find the vulnerability and loopholes to get unauthorized modifications,deletion and unauthorized access.



Read more
  1. Hacker Tools Online
  2. Pentest Box Tools Download
  3. Hack Tools Download
  4. Hacker Tools For Ios
  5. Hacking Tools Download
  6. Pentest Tools For Windows
  7. Hack Tools
  8. Hacking Tools Windows
  9. Pentest Tools Alternative
  10. Install Pentest Tools Ubuntu
  11. How To Install Pentest Tools In Ubuntu
  12. Pentest Tools Alternative
  13. Wifi Hacker Tools For Windows
  14. Pentest Tools For Ubuntu
  15. Tools 4 Hack
  16. Hacking Tools For Games
  17. Hacker Search Tools

Saturday, 11 April 2020

ASOIAF: Getting Started With Army Building

That Throne didn't build itself in a day.

I don't know about you folks, but building army lists and theorycrafting is one of the biggest draws for me when it comes to a miniatures game.  I just absolutely adore designing my own army with a theme that I appreciate and then playing them on the battlefield.  If I was to timebox it, I would say that at least half the time I spend with the hobby is designing armies to play and the other half is actually playing them.  Yes, that's correct.  I spend almost all my time playing the game, writing about it, and building army lists.  What about painting?  Well... that's another story for another time!

The first tool you will need when designing armies for this game is the ASOIAFBuilder.  The second tool you will want if you want to build army lists on your phone is War Council.  Both of these army builders are super useful for you to get an army up quickly and start playing the game.

Ah yes, so what do you do first when you want to build army list?  Well, picking a faction will be a good start.  If you read my previous article when I gave an overview of the Starks and the Lannisters, you'll know that the two factions are very different mechanically.  You need to find the house that best cater to your personality and what kind of playstyle that best suits you on the battlefield.  For a lot of fans of the show, you must have a favorite house by now right?  What I think would be pretty safe is that if you have a favorite house that is not yet in the game, it might be worthwhile for you to explore similar traits associated with those different houses in the ones that do currently exist.  For example, I would say that the Tyrells share many of the same traits as the Lannisters while Targaryens are more similar to the Starks.  Might as well start prepping for the future because sooner or later, those houses will come out.  If you're still hungering for those Dragons or upset the Greyjoys are not raiding the game yet, then I don't know what to tell ya, you're missing out on an otherwise great minis game.

Each Commander's Tactics Cards are different!

So back to business:  Once you find a faction that you like, it's time to pick a Commander that suits your playstyle.  There's a ton of Commanders in the game and all of them are free.  Most of the Commanders in the game will want to lead units from the front, but there are also some Commanders who like to take command from the back lines or maybe even issue orders from Court.  Yes, there are NCU Commanders and all of them are 0 points!  You just need to find one that best suits your playstyle and what you want them to do.  Each faction comes with 14 generic Faction Tactics cards (7x2) and each Commander adds 6 more to that, 3 of which are unique and will change the dynamics of your army.  For example, if I was looking at Lannisters and I was to pick The Mountain for my Commander, I know that my army will be using tactics cards geared for bloodthirsty aggressive vs. someone like Tyrion Lannister, who will be more cunning with plenty of tricks up his sleeve.  Just remember this, whoever you choose as a Commander will change the playstyle and layout of the rest of your army.  This means that whoever you choose will likely influence your choices for NCUs, your units, and which game modes they will be most effective in.  To get started, check out one of the army builders I linked above and look at the Tactics cards of the different Commanders your faction can take.  Look at their tactics cards and read the special abilities on their card and see if that jives with what you want to run.

Even Jamie as a Commander works wonders in a Guard unit!

With your Commander selected, the next thing you want to do is build a 40 point army list.  This is the most commonly-played points range and a large portion of all competitive events and tournaments are ran at this.  One of the things I advise players to do if they want to get serious with the game is getting very familiar with the points range that the meta, your LGS, and your tournament events play at.  It's a very different game going from 30 points to 50 points for example, and you want to get familiar at the one that's most commonly played.  Treat this as your 2K points of ITC and stay at this point range for your first couple of games.  Each of the Core sets has just enough for you to get a taste of the game and that's well and good, but I don't think I've ever played a minis game that you can get full satisfaction from the game by just playing with what's in the starter box.  I've been playing minis games for a long enough time that when I first started with this game, I did a ton of research into looking into the meta, and what I thought were some competitive options.  Trust me, it will save you an epic ass ton of time and money if you do a little bit of research ahead of time and see what's currently out there and what looks fun and interesting to you.  That's what the army builders are for, and that's for theorycrafting and proxying some of the units you already have before you go out there and buy them.

Alright, now with 40 points as your gold standard and a Commander to lead the army, you now have to add units.  For the purposes of this article, I will briefly go over unit selection as well as NCUs (Non-Combat Unit) even though I feel that NCUs deserve their own article.  There is a lot to cover for them, but I will say that from what I read/talked/seen being played is that at 40 points, you want 2 NCUs in your army.  Most NCUs cost points and those points directly contend with your units on the battlefield so you really have to think carefully about how you want to spend your points.  For example, a unit of Guardsman costs 5 points while someone like Tywin Lannister as an NCU costs 4 by himself.  That's 1 point less than a unit that has actual battlefield performance vs. an NCU who has an amazing once-a-game ability but also has the ability to claim zones on the tactics board.  Without getting too deep into the tactics board and NCUs, I will say that in some cases, the NCU might be better because they have better synergy with the rest of your army.  Just realize that 1. NCUs cost points 2. They can sometimes contribute to your battleplan more than actual units and 3. Count as an activation.

Another great attachment option is the Guard Captain!

When it comes to units, you really want units that jive with your commander.  You want to be able to amplify the Commanders' strengths rather than mitigate their weaknesses IMO.  There's a couple of reasons for this but the biggest one is that there are units in the game that will play very nicely with your Commander's tactics cards and if you have units that don't utilize these tactics cards, you won't be able to use them as effectively.  That's what I recommend doing first, and that's finding units that play well with your Commanders overall battleplan and takes advantage of their tactics cards.  For example, if you take a unit like the Lannister Guards above who already have an excellent 3+ defense save and pair them up with Jaimie's tactics cards, not only will you have a unit that will be even more difficult to take down, but you will also get tactics cards that allows you to parry/riposte and make up for that lower damage curve (6/5/3).

Hell, there's just so much to talk about when it comes to this game that I haven't covered yet when it comes to army building.  Tomorrow, I'll go through some Lannister and Stark list construction so you can take a look at some of the army lists I've been playing with.  I'll talk more about unit selection specifically for the Lannister and Stark armies as well as unit attachments, NCU choices, activations, and other good synergies.  Like I said, army building is one of my favorite aspects of the hobby and I can geek out for days about it.