> For the complete documentation index, see [llms.txt](https://luis-souza-1.gitbook.io/wiki/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://luis-souza-1.gitbook.io/wiki/security.md).

# Segurança

## Ataques

* [Broken Access Control](https://owasp.org/www-project-top-ten/2017/A5_2017-Broken_Access_Control)
* [Broken Authentication](https://owasp.org/www-project-top-ten/2017/A2_2017-Broken_Authentication)
* [Cross Site Scripting (XSS)](https://owasp.org/www-project-top-ten/2017/A7_2017-Cross-Site_Scripting_\(XSS\))
* [Injection](https://owasp.org/www-project-top-ten/2017/A1_2017-Injection)
* [Insecure Deserialization](https://owasp.org/www-project-top-ten/2017/A8_2017-Insecure_Deserialization)
* [Insufficient Logging Monitoring](https://owasp.org/www-project-top-ten/2017/A10_2017-Insufficient_Logging%2526Monitoring)
* [Security Misconfiguration](https://owasp.org/www-project-top-ten/2017/A6_2017-Security_Misconfiguration)
* [Sensitive Data Exposure](https://owasp.org/www-project-top-ten/2017/A3_2017-Sensitive_Data_Exposure)
* [Using Components With Known Vulnerabilities](https://owasp.org/www-project-top-ten/2017/A9_2017-Using_Components_with_Known_Vulnerabilities)
* [XML External Entities (XXE)](https://owasp.org/www-project-top-ten/2017/A4_2017-XML_External_Entities_\(XXE\))

## Bibliotecas

* [Advisor](https://snyk.io/advisor)
* [DependencyCheck](https://github.com/jeremylong/DependencyCheck)
* [NPM Audit](https://docs.npmjs.com/cli/v7/commands/npm-audit/)
  * [NPM Audit HTML](https://github.com/eventOneHQ/npm-audit-html)
* [Gitleaks](https://github.com/zricethezav/gitleaks)
* [Infisical](https://infisical.com/)
* [Retire.js](https://github.com/RetireJS/retire.js)

## Ferramentas

* [Burp Suite](https://portswigger.net/burp)
* [CSRL Tester](https://www.toolwar.com/2013/12/csrftester-csrf-vulnerability-tester.html)
* [HCaptcha](https://www.hcaptcha.com/)
* [Nikto2](https://cirt.net/Nikto2)
* [Observatory Mozilla](https://observatory.mozilla.org/)
* [OWASP Zap](https://www.zaproxy.org/)
* [Security Headers](https://securityheaders.com/)
* [social-engineer-toolkit (SET)](https://github.com/trustedsec/social-engineer-toolkit)
* [SSL Trust](https://www.ssltrust.com.au/ssl-tools/website-security-check)
* [TypingDNA](https://www.typingdna.com/)
* [Virus Total](https://www.virustotal.com)
* [zphisher](https://github.com/htr-tech/zphisher)

## Links

* [Firefox Monitor](https://monitor.firefox.com/)
* [Haveibeenpwned](https://haveibeenpwned.com/)
* [OWASP](https://owasp.org/)
  * [OWASP Zap](https://www.zaproxy.org/)

## Pessoas

* [Crackers](https://pt.wikipedia.org/wiki/Cracker)
* [Hackers](https://pt.wikipedia.org/wiki/Hacker)

## Plataformas

* [Anchore](https://anchore.com/)
* [Blumira](https://www.blumira.com/)
* [BridgeCrew](https://bridgecrew.io/)
* [Doppler](https://www.doppler.com/)
* [Otto](https://www.otto-js.com/)
* [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud)
* [Snyk](https://snyk.io/)
* [SonarQube](https://www.sonarqube.org/)
  * [Sonar Qube SAST](https://www.sonarqube.org/features/security/sast/)
* [Sysdig](https://sysdig.com/)