Security Flashcards

Increasing security awareness and learning web application weaknesses has never been more fun. Created by @_etzold.

[Security Flashcards @secflashcards]

Created a new #security #flashcard. This time it summarizes the minimal steps to create an encrypted device on Linux on the command line with cryptsetup. Now the deck has grown 41 cards, available at https://t.co/KM2IlKWsk5 #appsec #infosec #cryptsetup #Linux

[Security Flashcards @secflashcards]

Created a new #security #flashcard about Trojan Source a #vulnerability that exploits features in Unicode required for left-to-right and right-to-left languages to inject vulns into source code. The deck now has 40 cards, available at https://t.co/KM2IlKWsk5 #appsec #infosec

[Security Flashcards @secflashcards]

I've added a new flashcard for a machine learning #vulnerability to #Security #Flashcards. The card deck now has 38 cards, available at https://t.co/KM2IlKEQVv Already have a download link? Use it to get the new cards for free. Paper: https://t.co/l9FF4Rxlqs #appsec #infosec #ml

[Security Flashcards @secflashcards]

Inspired by the excellent work of @S1r1u5_ I've added a new #flashcard about prototype pollution to #Security Flashcards. The updated card deck is available at https://t.co/Yq9C5TdXlf. If you already have a download link, use it to get the new version for free. #appsec #infosec

[Security Flashcards @secflashcards]

#Security #flashcards has now grown to 36 cards - 30 application and 6 machine learning #weaknesses. If you already have downloaded a card deck use your download link to get the new version for free! Available at https://t.co/Yq9C5SWlWF. #ml #appsec #infosec

[Security Flashcards @secflashcards]

Application #security weaknesses as #flashcards. Here’s another flashcard I've created: command injection. More flashcards are available at https://t.co/KM2IlKWsk5. #appsec #infosec #sketchnotes

[Security Flashcards @secflashcards]

I've created handwritten #security #flashcards with #sketchnotes on each card. You can download and use them to learn web application weaknesses. Here's one example describing the insecure deserialization weakness - some more will follow. https://t.co/Yq9C5TdXlf #appsec #infosec