Owasp T-Shirts

Cool design for ethical hackers :) | Perfect for T-shirts, hoodies, mugs, stickers etc!

The Open Web Application Security Project is an online community that produces freely-available articles, methodologies, documentation, tools, and technologies in the field of web application security.

For me, Dinosaurs reminds me of the time. The time they lived in and the time we are currently living in. There is a gap between those two, right? A TimeGap? Well, that's the theory!

The CAPTCHA is annoying for us as humans, but it could be a great way to stop automatic attacks or bots like brute force, CSRF or even XSS attacks.

Developers are under great pressure with aggressive delivering dates but, one of the most important things that they shouldn't overlook, is to applying input validation in the functions or methods. This is a black background with white letters design version.

Besides input validation which avoids processing any untrusted data by the application, it is important to perform output validation when writing logs, not only to avoid disclosing any sensitive information but also to prevent local file inclusion attacks.

In case that x-powered-by header is delivered by your service, override it with misleading information to make attackers life harder like "Not Your Business 1.0". This is a black background with white letters design.

This is one of the best practice which is a must when developing any web server that provides cookies. With the secure flag assigned on cookies, it will only be transferred through HTTPS.

Never forget to handle a potential exception thrower code to avoid any undesired web application status. Run the code within a try and process the error on the catch section.

Any input that is controllable by the user is susceptible of being manipulated and turn it as an evil payload for remote code execution on the victim server.

Normally, any authentication through a website is done through HTTP POST method since a form is needed with login information. This could minimise the risk of disclosing the credentials when your browser stores the URL in plan text or even being written in logs on the server side.

Awareness design to remind the importance of validating zip files before decompressing it like limiting the number of files, the decompressed size and a maximum decompressed file size.

HSTS is a must when it comes to securing web application HTTPS connections. So, if there is no HSTS header, no deal.

This is a cool and funny design to certify that the code is free of any possible injection threats following the best practices like OWASP or CWE.

HSTS is a must when it comes to securing web application HTTPS connections. So, if there is no HSTS header, no deal. This is a black background with white letters design.

Developers are under great pressure with aggressive delivering dates but, one of the most important things that they shouldn't overlook, is to applying input validation in the functions or methods.

To mitigate the risk of supply chain attacks or other similar ones that implies malicious code being incorporated in the code, it is recommended to perform malware scanning to the dependencies before using them into your project. This is a black background design version with white letters.

This is a reminder for developers to replace any print used for debugging purposes with logger to write them in files.

The helmet.js should be the minimum security requirement for node.js express applications. By doing so, developers can provide protection to the web application with the necessary secure http headers.

Kind secure coding advice for developers to ensure that the content security policy header is used on http responses and mitigate XSS attacks on users visiting your website. This is a black background with white letters design version.

A design about the the common weakness enumeration 89 represented in an iconic way. Good for secure coding guideline and awareness to avoid being vulnerable to sql injection attacks.

OWASP is a foundation that provides trainings, guidelines and useful tools for cybersecurity professionals to make the internet a safe place. This is a black background with white letters design version.

The best practice is to disable external entities on XML, otherwise, it will be the door for different type of attacks like the Billion Laughs. A cool black background version design with white letters.

Any input that is controllable by the user is susceptible of being manipulated and turn it as an evil payload for remote code execution on the victim server. Black background design with white letters.

APP Security Engineer is a Cool design of this role tittle. If you are this kind of cybersecurity professional, your duty is to reduce the risk as much as possible in code and dependencies. Also you'll enact activities like threat modelling, malware scanning, secure coding practices and correct secret management.

This should be the input validation steps that the code must do to avoid processing harmful untrusted data. This is a black background with white letters design version.

If the web application is not properly implemented and it doesn't performs input validation correctly on login, then it could be bypassed by sql injection.

This is one of the best practice which is a must when developing any web server that provides cookies. With the secure flag assigned on cookies, it will only be transferred through HTTPS. Black background with white letters design version.

The design is about one of the guidelines provided by OWASP, to put in place security measures to restrict the import or usage of packages with known vulnerabilities.

A design about the the common weakness enumeration 79 represented in an iconic way. Good for secure coding guideline and awareness to avoid being vulnerable to XSS attacks.

To mitigate the risk of supply chain attacks or other similar ones that implies malicious code being incorporated in the code, it is recommended to perform malware scanning to the dependencies before using them into your project.

The Open Systems Interconnection model is a conceptual model that characterises and standardises the communication functions of a telecommunication or computing system without regard to its underlying internal structure and technology

A cool design with a black background and white letters about one of the web application threats, the cross site scripting or XSS. This kind of attack abuses the weakness of the site to deliver malicious code on clients browsers to steal your cookies or other harmful actions.

A black background with white letters design version about one of the guidelines provided by OWASP, to put in place security measures to restrict the import or usage of packages with known vulnerabilities.

A design version with white letters and black background, This is a reminder for developers to replace any print used for debugging purposes with logger to write them in files.

Want to avoid the undesired clickjacking attack on your website? Then X-Frame-Options should be one of the headers to respond with sameorigin value. Or you can make it even more restrictive with deny. The result is avoiding any eventual attacker to use hidden frames to compromise the website user.