Security Testing

1{
2    "connectionCheckUrl": "http://www.google.com/",
3    "core": {
4        ...
5    },
6    "deprecations": {
7        ...
8    },
9    "generationTimestamp": "2021-05-19T12:16:52Z",
10    "id": "default",
11    "plugins": {
12        "42crunch-security-audit": {
13            "buildDate": "Oct 06, 2020",
14            "defaultBranch": "master",
15            "dependencies": [
16                ...
17            ],
18            "developers": [
19                ...
20            ],
21            "excerpt": "Performs API contract security audit to get a detailed analysis of the possible vulnerabilities and other issues in the API contract.",
22            "gav": "io.jenkins.plugins:42crunch-security-audit:3.8",
23            "issueTrackers": [
24                ...
25            ],
26            "labels": [
27                ...
28            ],
29            ...
30            "title": "42Crunch REST API Static Security Testing",
31            "url": "http://archives.jenkins-ci.org/plugins/42crunch-security-audit/3.8/42crunch-security-audit.hpi",
32        },
33        "AnchorChain": {
34            ...
35            "url": "http://archives.jenkins-ci.org/plugins/AnchorChain/1.0/AnchorChain.hpi",
36            ...
37        },
38        ... many hundreds more ...
39    }
40    ...
41}
42$all = (Get-Content(".\update-center.json") | convertfrom-json)
43$all.gettype().fullname
44
45$plugins = $all.plugins
46$plugins.gettype().fullname
47System.Management.Automation.PSCustomObject
48System.Management.Automation.PSCustomObject
49$plugins | get-member -MemberType NoteProperty | foreach name | foreach $plugins.$_.url
50$Json = Invoke-RestMethod https://updates.jenkins.io/update-center.json
51$Json = $Json -replace '^updateCenter.post\(|\);$' | ConvertFrom-Json
52
53$plugins = $Json.plugins
54
55foreach($prop in $plugins.psobject.properties.name)
56{
57    $plugins.$prop.url
58}
59

1{
2    "connectionCheckUrl": "http://www.google.com/",
3    "core": {
4        ...
5    },
6    "deprecations": {
7        ...
8    },
9    "generationTimestamp": "2021-05-19T12:16:52Z",
10    "id": "default",
11    "plugins": {
12        "42crunch-security-audit": {
13            "buildDate": "Oct 06, 2020",
14            "defaultBranch": "master",
15            "dependencies": [
16                ...
17            ],
18            "developers": [
19                ...
20            ],
21            "excerpt": "Performs API contract security audit to get a detailed analysis of the possible vulnerabilities and other issues in the API contract.",
22            "gav": "io.jenkins.plugins:42crunch-security-audit:3.8",
23            "issueTrackers": [
24                ...
25            ],
26            "labels": [
27                ...
28            ],
29            ...
30            "title": "42Crunch REST API Static Security Testing",
31            "url": "http://archives.jenkins-ci.org/plugins/42crunch-security-audit/3.8/42crunch-security-audit.hpi",
32        },
33        "AnchorChain": {
34            ...
35            "url": "http://archives.jenkins-ci.org/plugins/AnchorChain/1.0/AnchorChain.hpi",
36            ...
37        },
38        ... many hundreds more ...
39    }
40    ...
41}
42$all = (Get-Content(".\update-center.json") | convertfrom-json)
43$all.gettype().fullname
44
45$plugins = $all.plugins
46$plugins.gettype().fullname
47System.Management.Automation.PSCustomObject
48System.Management.Automation.PSCustomObject
49$plugins | get-member -MemberType NoteProperty | foreach name | foreach $plugins.$_.url
50$Json = Invoke-RestMethod https://updates.jenkins.io/update-center.json
51$Json = $Json -replace '^updateCenter.post\(|\);$' | ConvertFrom-Json
52
53$plugins = $Json.plugins
54
55foreach($prop in $plugins.psobject.properties.name)
56{
57    $plugins.$prop.url
58}
59https://updates.jenkins.io/download/plugins/testingbot/1.16/testingbot.hpi
60https://updates.jenkins.io/download/plugins/testinium/1.0/testinium.hpi
61https://updates.jenkins.io/download/plugins/testlink/3.16/testlink.hpi
62https://updates.jenkins.io/download/plugins/testng-plugin/1.15/testng-plugin.hpi
63https://updates.jenkins.io/download/plugins/testodyssey-execution/2.1.5/testodyssey-execution.hpi
64https://updates.jenkins.io/download/plugins/testopia/1.3/testopia.hpi
65https://updates.jenkins.io/download/plugins/testproject/2.10/testproject.hpi
66https://updates.jenkins.io/download/plugins/testquality-updater/1.3/testquality-updater.hpi
67https://updates.jenkins.io/download/plugins/testsigma/1.3/testsigma.hpi
68....
69....
70....
71

1GET / HTTP/1.1
2Host: google.com
3const net = require('net')
4const HTTPTag = require('http-tag')
5
6const socket = net.createConnection({
7    host: 'localhost',
8    port: 8000,
9}, () => {
10    // This callback is run once, when socket connected
11
12    // Instead of manually writing like this:
13    // socket.write('GET / HTTP/1.1\r\n')
14    // socket.write('My-Custom-Header: Header1\r\n\r\n')
15    
16    // You will be able to write your request(or response) like this:
17    const xHeader = 'Header1' // here in the epressions you can pass any characters you want
18    socket.write(
19        HTTPTag`
20        GET / HTTP/1.1
21        My-Custom-Header: ${xHeader}
22        
23        `
24    )
25    socket.end()
26})
27
28socket.on('close', hasError => console.log(`Socket Closed, hasError: ${hasError}`))
29
30// set readable stream encoding
31socket.setEncoding('utf-8')
32socket.on('data', data => console.log(data))
33

1X-Frame-Options: SAMEORIGIN
2X-Content-Type-options: nosniff
3

1X-Frame-Options: SAMEORIGIN
2X-Content-Type-options: nosniff
3Header always set X-Frame-Options "SAMEORIGIN"
4Header always set X-Content-Type-Options nosniff
5

1<input type="text" name="name">
2function clear($data){
3    $data = trim($data);
4    $data = stripslashes($data);
5    $data = htmlspecialchars($data);
6}
7
8clear($_POST['name']);
9
10

1<input type="text" name="name">
2function clear($data){
3    $data = trim($data);
4    $data = stripslashes($data);
5    $data = htmlspecialchars($data);
6}
7
8clear($_POST['name']);
9
10public function store(Request $request)
11{
12    $validated = $request->validate([
13        'name' => 'required|max:255',
14        'body' => 'required',
15    ]);
16
17}
18

1<input type="text" name="name">
2function clear($data){
3    $data = trim($data);
4    $data = stripslashes($data);
5    $data = htmlspecialchars($data);
6}
7
8clear($_POST['name']);
9
10public function store(Request $request)
11{
12    $validated = $request->validate([
13        'name' => 'required|max:255',
14        'body' => 'required',
15    ]);
16
17}
18@if ($errors->any())
19    <div class="alert alert-danger">
20        <ul>
21            @foreach ($errors->all() as $error)
22                <li>{{ $error }}</li>
23            @endforeach
24        </ul>
25    </div>
26@endif
27

1<input type="text" name="name">
2function clear($data){
3    $data = trim($data);
4    $data = stripslashes($data);
5    $data = htmlspecialchars($data);
6}
7
8clear($_POST['name']);
9
10public function store(Request $request)
11{
12    $validated = $request->validate([
13        'name' => 'required|max:255',
14        'body' => 'required',
15    ]);
16
17}
18@if ($errors->any())
19    <div class="alert alert-danger">
20        <ul>
21            @foreach ($errors->all() as $error)
22                <li>{{ $error }}</li>
23            @endforeach
24        </ul>
25    </div>
26@endif
27@error('name')
28    <div class="alert alert-danger">{{ $message }}</div>
29@enderror
30