Comunicaciones Electrónicas Y Auditoria De Seguridad

Por lo que respecta a las condiciones técnicas de seguridad de las comunicaciones electrónicas, en lo relativo a la constancia de la transmisión y recepción, 

- de sus fechas, 

- del contenido integro de las comunicaciones 

- y la identificación fidedigna del remitente y destinatario de las mismas, 

según lo establecido en la Ley 11/2007, de 22 de junio, serán implementadas de acuerdo con lo establecido en el Esquema Nacional de Seguridad.

Requerimientos técnicos de notificaciones y publicaciones electrónicas. Las notificaciones y publicaciones electrónicas de resoluciones y actos administrativos se realizarán de forma que cumplan determinadas exigencias técnicas. Que:

a) Aseguren la autenticidad del organismo que lo publique.

b) Aseguren la integridad de la información publicada.

c) Dejen constancia de la fecha y hora de la puesta a disposición del interesado de la resolución o acto objeto de publicación o notificación, así como del acceso a su contenido.

d) Aseguren la autenticidad del destinatario de la publicación o notificación.

Firma electrónica. La política de firma electrónica y de certificados concretará los procesos de 

- generación, 

- validación y 

- conservación de firmas electrónicas, 

- así como las características y requisitos exigibles a:

• los sistemas de firma electrónica, 
• los certificados, 
• los servicios de sellado de tiempo, 
• y otros elementos de soporte de las firmas.

En cuanto a la Auditoría de la seguridad. Los sistemas de información electrónica serán objeto de una auditoría regular ordinaria, al menos cada 2 años, que verifique el cumplimiento de los requerimientos del Esquema Nacional de Seguridad.

Con carácter extraordinario, deberá realizarse dicha auditoría siempre que se produzcan modificaciones sustanciales en el sistema de información, que puedan repercutir en las medidas de seguridad requeridas. 

La realización de la auditoria extraordinaria determinará la fecha de cómputo para el cálculo de los dos años, que se establecen para la realización de la siguiente auditoría regular ordinariar.

Esta auditoría se realizará en función de la categoría del sistema.

En el marco de lo dispuesto en el artículo 39, de la ley 11/2007, de 22 de junio, la auditoría profundizará en los detalles del sistema hasta el nivel que considere que proporciona evidencia suficiente y relevante, dentro del alcance establecido para la auditoría.

En la auditoría se utilizarán 

- los criterios, 

- métodos de trabajo y de conducta generalmente reconocidos, 

- así como la normalización nacional e internacional aplicables a este tipo de auditorías de sistemas de información.

El informe de auditoría deberá 

- identificar deficiencias y 

- sugerir las posibles medidas correctoras o complementarias necesarias, 

- así como las recomendaciones que se consideren oportunas. 

- Deberá incluir:

• los criterios metodológicos de auditoría utilizados, 
• el alcance y 
• el objetivo de la auditoría, y 
• los datos, hechos y observaciones en que se basen las conclusiones formuladas.

Los informes de auditoría serán presentados 

- al responsable del sistema y 

- al responsable de seguridad competentes. 

Estos informes serán analizados por el responsablede seguridad competente, que presentará sus conclusiones al responsable del sistema para que adopte las medidas correctoras adecuadas.

En el caso de los sistemas de categoría ALTA, visto el dictamen de auditoría, el responsable del sistema podrá acordar la retirada 

- de operación de alguna información, 

- de algún servicio o 

- del sistema en su totalidad, 

durante el tiempo que estime prudente y hasta la satisfacción de las modificaciones prescritas.

Los informes de auditoría podrán ser requeridos por los responsables de cada organización con competencias sobre seguridad de las tecnologías de la información.

En cuanto al Informe del estado de la seguridad. El Comité Sectorial de Administración Electrónica recogerá la información relacionada con el estado de las principales variables de la seguridad en los sistemas de información, de forma que permita elaborar un perfil general del estado de la seguridad en las Administraciones Públicas.

El Centro Criptológico Nacional articulará 

- los procedimientos necesarios para la recogida y consolidación de la información, 

- así como los aspectos metodológicos para su tratamiento y explotación, a través de los correspondientes grupos de trabajo que se constituyan al efecto en el Comité Sectorial de Administración Electrónica y en la Comisión de Estrategia TIC para la Administración General del Estado.

Capacidad de respuesta a incidentes de seguridad de la información. El Centro Criptológico Nacional (CCN) articulará la respuesta a los incidentes de seguridad en torno a la estructura denominada CCN-CERT (Centro Criptológico Nacional-Computer Emergency Reaction Team), que actuará sin perjuicio de las capacidades de respuesta a incidentes de seguridad que pueda tener cada administración pública y de la función de coordinación a nivel nacional e internacional del CCN.

Las Administraciones Públicas notificarán al Centro Criptológico Nacional aquellos incidentes que tengan un impacto significativo en 

- la seguridad de la información manejada y 

- de los servicios prestados en relación con la categorización de sistemas.

Continue reading

1. Lifestyle Jay Gwuapo
2. How Much Is Lifestyle Fitness Membership
3. Lifestyle 4X4 Brisbane
4. Viaje Vs Viaja
5. What Lifestyle Do You Want
6. Lifestyle 2020
7. Curiosidades Brooklyn 99
8. Viaje Jalapeno Cigar 2020
9. How Many Lifestyle Diseases Are There
10. Viaje 9 Dias Croacia
11. Will Lifestyle Store
12. Viaje Gratis Didi
13. Curiosidades Nova Zelandia
14. Curiosidades 4
15. Are Lifestyle Condoms Durable
16. Lifestyle Insurance
17. Viaje Pronto
18. Curiosidades Karl Marx
19. Curiosidades Y Algo Mas
20. Lifestyle Theory
21. Lifestyle Jobs
22. Curiosidades Kim Jong Un
23. Viaje 1 Y 2
24. What Does Vieja Mean
25. Who Lifestyle Guidelines
26. Curiosidades Japon
27. Viaje 7 Dias Galicia
28. Lifestyle Hoodie
29. Lifestyle 8925 Home Gym
30. Viaje 40 Años
31. Viaje 8 Dias Egipto
32. Curiosidades Yoongi
33. How To Spell Viaje In English
34. Curiosidades De Plantas Vs Zombies 2
35. Lifestyle Amrit Maan Lyrics
36. Lifestyle Kaduna Park
37. To Viaje En Español
38. Curiosidades Matematicas
39. Curiosidades Woodstock
40. Viaje Tiempo Atras Lyrics
41. How Many Lifestyle Apps Are There
42. Viaje 6 Meses Sudamerica
43. Curiosidades Estupidas
44. How Lifestyle Affects Aging
45. Curiosidades De Paises
46. Curiosidades Will And Grace
47. Viaje Na Viagem Londres
48. Who Lifestyle Definition
49. Lifestyle X3 Spa
50. Agencia De Viaje 002
51. Viaje 8 Dias Escocia
52. What'S Viaje Mean
53. Curiosidades Olimpiadas

16 Best Hacking Websites to Learn Ethical Hacking From Basic 2018

1. Metasploit: Find security issues, verify vulnerability mitigations & manage security assessments with Metasploit. Get the worlds best penetration testing software now.
2. Phrack Magazine: Digital hacking magazine.
3. Hacked Gadgets: A resource for DIY project documentation as well as general gadget and technology news.
4. KitPloit: Leading source of Security Tools, Hacking Tools, CyberSecurity and Network Security.
5. Hakin9: E-magazine offering in-depth looks at both attack and defense techniques and concentrates on difficult technical issues.
6. SecurityFocus: Provides security information to all members of the security community, from end users, security hobbyists and network administrators to security consultants, IT Managers, CIOs and CSOs.
7. HackRead: HackRead is a News Platform that centers on InfoSec, Cyber Crime, Privacy, Surveillance, and Hacking News with full-scale reviews on Social Media Platforms.
8. The Hacker News: The Hacker News — most trusted and widely-acknowledged online cyber security news magazine with in-depth technical coverage for cybersecurity.
9. Offensive Security Training: Developers of Kali Linux and Exploit DB, and the creators of the Metasploit Unleashed and Penetration Testing with Kali Linux course.
10. Hack Forums: Emphasis on white hat, with categories for hacking, coding and computer security.
11. Packet Storm: Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers.
12. Exploit DB: An archive of exploits and vulnerable software by Offensive Security. The site collects exploits from submissions and mailing lists and concentrates them in a single database.
13. Black Hat: The Black Hat Briefings have become the biggest and the most important security conference series in the world by sticking to our core value: serving the information security community by delivering timely, actionable security information in a friendly, vendor-neutral environment.
14. NFOHump: Offers up-to-date .NFO files and reviews on the latest pirate software releases.
15. SecTools.Org: List of 75 security tools based on a 2003 vote by hackers.
16. DEFCON: Information about the largest annual hacker convention in the US, including past speeches, video, archives, and updates on the next upcoming show as well as links and other details.

10 Best Wifi Hacking Android Apps To Hack Others Wifi (Without Root)

 Top 10 Best wifi hacking apps to hack wifi^s.   

Today, a smartphone without internet is like a decade ago featured phone which is mainly used to dial and receive the call. No one would even want such a phone today. The Internet is now a necessity for every mobile user. They can't live without the internet and unfortunately; if the Internet is not working due to some signal issues; they get frustrated and sometimes depressed too.

Generally, we need to pay for the Internet subscription package to run mobile data on our smartphone. But what to do if I don't want to spend money on the Internet? The solution is to connect your mobile with WiFi. You can access the internet from there. Easy, right? NO, it's not easy until you know the password of WiFi. But what if you don't know.

Two ways possible in this situation

1. Either you ask for the password to the owner; he will provide you to use his internet through Wi-Fi
2. You have to hack the Wi-Fi password of other's network and use the internet as an unauthorized person.

First is not reliable when you don't know the person so, you only have a second option. Today, I am going to share a few apps that help you steal the password and allow you to use the internet from others' account.

1. WiFi WPS WPA Tester

This is the foremost tool to hack the WiFi password without knowing even the root. This is a preferred choice of numerous smartphone users to decipher the pin and get access to the Wi-Fi. As time passes, a tool is upgraded and now even hack the WiFi networks while it was used to check if an access point is highly vulnerable to the rancorous attacks or not.

If you are using Lollipop or above version on your android mobile phone; you don't even need to root your device to crack a WiFi network.

Android App

Pros

• Easy to use
• Free
• Decrypt the password in no time.
• Implementation of several algos like Zhao, Arris, Dlink and more.

Cons

• Need root access if you are using the version below Lollipop.

2. WPS Connect

Routers which has enabled a WPS protocol can be hacked with this app. The important thing is that almost all routers found in public places and homes fall under this category. In short, you will have what you want. Moreover, you can focus on your router & examine that it's vulnerable to any malicious attack or not. It helps you hack the WiFi password without root and also strengthen your WiFi network.

Once you identify the vulnerable (accessible) network, you can quickly get the password and start using the internet without any hassle. It uses algorithms like easyboxPIN and Zhao. Although, this app is not compatible with various Android phones as it is tested on Android devices like the Galaxy series, Nexus and more.

Android App

Pros

• It's free and easy to use
• Powerful algorithms (Zhao & easyboxPin) to crack the password
• Supports pinning of Wi-Fi routers

Cons

• Incompatible with few android devices
• Couldn't identify the network automatically.

3. WiFi WPS WPA Tester Premium

This is an excellent app to decrypt the WiFi network password on your android phone. This works fine on rooted & non-rooted android phones. If you can root the Android device; you can have a better chance to hack into. Today,  security is the primary concern and so, many people use the highly secured wireless router, I think. For such networks, this app will not work as it should be. But, still it can work for numerous times with the help of WPS; not all the time. Every time, you have to try your luck to get access to other's WiFi network. This WPS WPA tester is a premium apk.

Android App

Pros

• Works for both rooted and non-rooted android devices
• Find the nearby network and connect your mobile with it.

Cons

• It's a premium apk.
• You have to try your luck to get access to the nearby network.
• Not good to connect with highly secured wireless routers.

4. AndroDumpper Wifi (WPS Connect) – Discontinued

If you want to connect to a router which is WPS enabled; download this app immediately without going down to browse for other apps. Just open the app, start its interface & find the nearby wireless networks, you want to connect with. The app will provide an excellent option to regain the password of a selected network with & without root. Once you implemented the algorithm; it will display the password in app screen & connect to the network. Isn't it easy for you?

Android App

Pros

• It's Free on Google Play Store
• Easy to use and faster than some other tool.
• Works fine for rooted & non-rooted devices
• A dedicated blog is available for the tool (Get guidance anytime)
• Supports for giant company routers (Vodaphone, Asus, Huawei, Dlink, etc.)

Cons

• Rooting is required if you are using a version below android 5.0
• Works only for WPS enabled routers.

5. Wi-fi Password Hacker Prank

Wifi Password hacker prank is a free app for the android users and can help you to connect your android phone to wifi networks available nearby. This free app simulates a process of hacking the wireless network with your smartphone. With this app, you can hack all wifi network passwords with just one key. The Prank word itself says it's a funny app used to prank with your friends. Sometimes, girls can be impressed with this prank as well. But try this at your own risk. Look excellent and professional in front of your friends and colleagues.

Steps to Hack Wifi using the Wifi Password Hacker Prank:

• Catch up the wireless networks near to you and then select the secure network you wish to hack.
• Wait for a while & a dialogue will be opened with the wifi password.
• Bingo! Paste the password and start using others' Internet without spending single money.
• Watch your favourite show and movie in High-Definition quality without worrying about your mobile data.

Android App

6. WiFi Warden

WiFi Warden is one of the finest and free android WiFi hacking apps to get access to others WiFi with ease. With WiFi Warden, a user can Analyze the WiFi networks, connect to your WiFi using the passphrase and WPS and view saved WiFi passwords without root.

By analyzing the WiFi networks, you can see all necessary information that can be discovered on the wireless networks around including BSSID, SSID, Channel bandwidth, encryption, security, router manufacturer, distance and channel number, etc.

Android App

Pros

• Find the less crowded channel to get WiFi access.
• You can root your device on all Android versions.
• Easy to use and connect with the router quickly.
• All features of this app are available for free.

Cons

• This app doesn't work on all types of router, use a passphrase instead.
• Access Point (AP) must have enabled WPS.
• Require Android version 6 (Marshmallow) or higher version is necessary to display Wi-Fi networks around you.
• Some of the features are in the testing phase. So, use it your own risk.

7. WiFi Password

'WiFi Password' is a completely free app for those who don't want to get away from the Internet even when their internet data is running out. You can connect with others' WiFi routers and use their Internet.

If you are using Android Version 5 or above; 'WiFi Password' can be the right choice for you to watch your favorite shows on YouTube in HD without even worrying about Mobile Data.

Android App

Pros:

• Millions of WiFi Hotspots
• Scan and detect the WiFi security
• Connect WiFi Hotspot nearby without knowing the WiFi Password
• You can simply add a free WiFi Hotspot by sharing the passwords with others.

Cons :

• Still, there are some glitches in it but works well.

8. WiFi Kill Pro

WiFi Kill is one the best WiFi network controller application which can disable the Internet connection of others who are connected to the same network. Yes, this is true. It is a useful tool for internet users who want to improve their data speed by disabling other's internet connection and allocate all the bandwidth to your device only.

Currently, this app is only for Android users and needs root access to perform well.

Android App

Pros

• 
  
  • You can see all connected device on the same network you are connected.
• 
  
  • Display the data transfer rate of all devices
• 
  
  • Monitor network activity
• 
  
  • You can cut the network connection of any connected device.
• It works well on tablets too.

Cons

• 
  
  • Require root access
• Require Android version 4.0.3 or up to use this app.

9. Penetrate Pro

A popular Wifi hacker app for android users, Penetrate pro is free and works well on Android devices. This app is widely used to find WEP and/or WPA keys to connect the devices with network routers without knowing the wifi password. Just install the app and search for the network; this app starts automatically displaying the WEP/WPA keys on the screen. Tap on the network you want to connect; one it gets connected; you can start watching videos on YouTube. Quite interesting, doesn't it?

Android App

Pros

• 
  
  • Easy to search nearby free wifi networks.
• 
  
  • Connect the network without knowing keys
• Available for Free

Cons

• 
  
  • Not available on Google Play Store; need to download manually.
• Works well only for the rooted android devices

So, you have got the list of apps that help you use the internet from other's wireless network without getting caught. If you have any idea of any other Wi-Fi password hacking app; just let me know. We would love to discuss it here.

---

Disclaimer: VR Bonkers is not responsible for any consequences if you face while using any of the above apps. This is just a list and we are not taking any responsibility for the same. So, use them at your risk.

@EVERYTHING NT

Related word

• Pentest Methodology
• Pentest Documentation
• Pentestmonkey Cheat Sheet
• Hacking Link
• Hacker Keyboard
• Hacking Tools
• Hacker Videos
• Hacking The Art Of Exploitation
• Pentest Red Team
• Hacking For Dummies
• Pentest Box
• Hacking Groups
• Pentest Report
• Hacker0Ne
• Pentest Iso

How tO Secure Yourself From Evil Twin Attack

How To Secure Yourself From Evil Twin Attack ?

Hello, in this article you are going to learn how to secure yourself from getting hacked using evil twin attack.

1) Do not connect to any public networks, anyone can sniff your data while you are on a public network.Evil Twin attack will be performed as a public network, so wherever possible restrict connecting to any open or public networks mainly if it wifi name is same as your wifi name

2) When your internet connection suddenly stops working, you might be under DOS attack using evil twin attack, just restart the router and the hacker need to restart the attack and as it takes some time.  Maybe they leave it or continue some other time 

3) Running a VPN to ensure that any browsing and transmitted data is done through an encrypted tunnel that cannot be easily snooped. 

4) Do not always rely on the name of the network, make sure it is a legitimate and trusted network or not. 

Thank You for Reading, Hope It's Useful

@£V£RYTHING NT

Read more

• Pentest Online Course
• Pentest Training
• Hacker Anonymous
• Hacking Meaning
• Hacking Device
• Hacking With Raspberry Pi
• Pentest Active Directory
• Hacker Ethic
• Hacking Apps
• What Hacking Is
• Pentest Blog
• Pentest Environment
• Hacking Google
• Hacking Forums
• Pentest Nmap
• Hacking Language
• Pentest With Kali
• Pentest Questions
• Hacking Box
• Hacking Books

Theharvester: Email Harvesting Throughout Year

You might have harvested many things upto now but what we are going to harvest today is something bad :)

Requirements:

1. A Linux box (I'm using Kali Linux)
2. theharvester program (already available in Kali Linux)

So what does theharvester harvest? Well it harvests email addresses. theharvester is an Information gathering tool. If you want a list of emails to spam you can get that easily from theharvester tool and go on Spamming (I'm joking its illegal). It's a security tool that helps you in pentesting an organization (as always it can be used for evil as well). You can gather emails from an organization and look for potential victims to attack or use brute-force techniques to get their passwords or Social Engineer them into doing something that will let you compromise some or all systems in the organization. Uhh there are so many things that you can do when you have access to someone's email address.

OK stop talking and start doing.

Fire up a terminal in your kali box and type this command:

theharvester -d hotmail.com -l 50 -b google

In a small amount of time you'll see your terminal flooded with 200 hotmail.com email address. What does this command mean?

theharvester is the tool name that we are using
-d <domain_name> specifies the domain (or website) who's email addresses we're looking for, in our case it was hotmail.com
-l <number> specifies the number of results that we want in the output, I limited it to 50
-b <source> specifies the source on which to look for email addresses, I specified google as the source

Besides google we can specify any of the follow as source:
google, googleCSE, bing, bingapi, pgp, linkedin, google-profiles, people123, jigsaw, twitter, googleplus, all
Here the last entry all means look in every available source.

Let's say you wanted to look in every available source they you should specify the following command:

theharvester -d hotmail.com -b all

-f is another great flag which can be utilized to save the output in case we want to SPAM them later (just kidding) or for other reasons (I'm thinking positive). -f flag saves the result in html or xml format. Let's do just that:

theharvester -d gmail.com -l 50 -b google -f emailaddresses.html

here -f flag is followed by the location where we want to store the file and the name of file, in our case we stored it in our pwd (present working directory) with the name emailaddresses.html.

Above picture shows an html output generated by harvester.

That's it for this tutorial hope to see you next time!

More information

1. Pentestlab
2. Pentest Standard
3. Rapid7 Pentest
4. Hacking
5. Pentest Dns Server
6. Pentest Kit
7. Pentest Wiki
8. Pentest Meaning
9. Hacking Google
10. Hacking Language
11. Hacking With Linux
12. Hacker Box
13. Hacker Anonymous
14. Pentest Partners
15. Pentest Example Report
16. Pentest As A Service
17. Hacking Jacket
18. Hacker0Ne
19. Hacker Kevin Mitnick
20. Hacking Websites

Top Linux Commands Related To Hardware With Descriptive Definitions

Commands in Linux are just the keys to explore and close the Linux. As you can do things manually by simple clicking over the programs just like windows to open an applications. But if you don't have any idea about commands of Linux and definitely you also don't know about the Linux terminal. You cannot explore Linux deeply. Because terminal is the brain of the Linux and you can do everything by using Linux terminal in any Linux distribution. So, if you wanna work over the Linux distro then you should know about the commands as well. In this blog you will exactly get the content about Linux hardware commands which are related to CPU and memory processes.

dmesg

The dmesg command is used in Linux distribution for the sake of detecting hardware and boot messages in the Linux system.

cat /proc/cpuinfo

The cat command is basically used to read something over the terminal like cat index.py will display all the content which exist in index.py over the terminal. So cat /proc/cpuinfo will display the model of the CPU over the terminal.

cat /proc/meminfo

This command is similar to the above command but the only difference is that this command shows the information of hardware memory over the terminal. Because it will open the memory info file over the terminal.

cat /proc/interrupts

This command is also similar to the above command but there is the difference of one thing that this command will display lists the number of interrupts per CPU per input output device.

lshw

This command is used in Linux operating system to displays information on hardware configuration of the system in Linux.

lsblk

The "lsblk" command is used in Linux operating system to displays block device related information in the Linux operating system.

dmidecode

The "dmidecode" command is used in Linux distributions to display the information about hardware from the BIOS.

hdparm -i /dev/sda

The hdparm command basically used to display the information about the disks available in the system. If you wanna know the information about the "sda" disk so just type "hdparm -i /dev/sda" and if you wanna know the information about "sdb" so just type "hdparm -i /dev/sdb".

hdparm -tT

The "hdparm" command is used for displaying the information about disks as we discussed in above command. If you wanna do a read speed test on the disk sda or sdb just type the command "hdparm -tT /dev/sda".

badblocks -s /dev/sda

This command is used in linux to display test operations for unreadable blocks on disk sda. If the command is like "badblocks -s /dev/sdb" it will display test operations for unreadable blocks on disk sdb.More articles

• Hacking To The Gate
• Hacker Anonymous
• Pentest +
• Pentesting And Ethical Hacking
• Pentest Ios
• Pentest Open Source
• Hacking Bluetooth
• Pentest Aws
• Hacking Jailbreak
• Hacking To The Gate
• Hacking Process
• Hacking Google
• Hacker Code
• Hacking Tutorials

August Connector

*|MC_PREVIEW_TEXT|*

OWASP Connector   August 2019 Communications | Projects | Events | Community | Membership COMMUNICATIONS Letter from the Vice-Chairman: Dear OWASP Community,   I hope you are enjoying your summer, mines been pretty busy, getting married, traveling to Vegas and the board elections. August has been quite a busy month for the foundation. Attending BlackHat and DefCon as part of our outreach program, the upcoming elections ( I have to add, there were some really good questions from the community) and planning for the next two Global AppSec Conferences in September, it's been crazy. We the board would like to thank the staff and without naming any names (Jon McCoy) for their efforts during BlackHat and DefCon. I was there, on the stand, he did a good job of representing our community. Two days prior to BlackHat and Defcon the board met as part of our second face to face meeting of the year. This was two days well spent, collaborating on some of the burning topics, but also how to move forward. At the beginning of the year, we set out our strategic goals. Even though these goals are part of our everyday OWASP life we decided to put a name against them to champion them, below are our goals and who will be championing them going forward: Marketing - Chenxi Membership - Ofer Developer Outreach - Martin Project Focus - Sherif Improve Finances - Gary Perception - Martin  Process Improvement - Owen Consistent ED - Done!  Community Empowerment - Richard If you are interested in getting involved in or would like to hear more about any of these strategic goals, please reach out to the relevant name above.  Some of the Global board members will be attending both our Global AppSec Conference in Amsterdam but also in DC. We will hold our next public board meeting during the Global AppSec Conference in Amsterdam if you haven't already done so I would encourage you to both attend and spread the word of the conference. There are some great keynotes/ speakers and trainers lined up.  Regards Owen Pendlebury  Vice-Chairman of the OWASP Global Board of Directors DC Registration Now Open                                   Amsterdam Registration Now Open Congratulations to the Global AppSec Tel Aviv 2019 Capture the Flag Winners   For two full days, 24 competitors from around the world attacked various challenges that were present within the CTF activity held at Global AppSec Tel Aviv 2019. The competition began with a handful of competitors running neck and neck with two competitors, 4lemon and vasya, at the top, slowly gathering more points in their race hoping to win it all. At the last moment, they were overtaken by Aleph who swooped in and took away the victory for himself with a total score of 29 points!  We would like to thank all of the individuals who participated and once again, congratulations to the top 3. 1st Place Winner: Aleph (29 points) 2nd Place: 4lemon (24 points) 3rd Place: vasya (24 points) EVENTS  You may also be interested in one of our other affiliated events: REGIONAL EVENTS Event Date Location OWASP Portland Training Day September 25, 2019 Portland, OR OWASP Italy Day Udine 2019 September 27, 2019 Udine, Italy OWASP Poland Day October 16,2019 Wroclaw, Poland BASC 2019 (Boston Application Security Conference) October 19,2019 Burlington, MA LASCON X October 24 - 25,2019 Austin, TX OWASP AppSec Day 2019 Oct 30 - Nov 1, 2019 Melbourne, Australia German OWASP Day 2019 December 9 - 10, 2019 Karlsruhe, Germany AppSec California 2020 January 21 - 24. 2020 Santa Monica, CA OWASP New Zealand Day 2020 February 20 - 21, 2020 Auckland, New Zealand PARTNER AND PROMOTIONAL EVENTS Event Date Location it-sa-IT Security Expo and Congress October 8 - 10, 2019 Germany PROJECTS Project Review Results from Global AppSec - Tel Aviv 2019 The results of the project reviews from Global AppSec Tel Aviv 2019 are in!  The following projects have graduated to the indicated status: Project Leaders Level Mobile Security Testing Guide Jeroen Willemsen, Sven Schleier Flagship Cheat Sheet Series Jim Manico, Dominique Righetto Flagship Amass Jeff Foley Lab Please congratulate the leaders and their teams for their achievements! If your project was up for review at Global AppSec Tel Aviv 2019 and it is not on this list, it just means that the project did not yet receive enough reviews.  And, if you are interested in helping review projects, send me an email (harold.blankenship@owasp.com). Project Showcases at the Upcoming Global AppSecs The Project Showcases for Global Appsec DC 2019 and Global AppSec Amsterdam 2019 are finalized.  For a complete schedule, see the following links: Global AppSec - DC 2019 Project Showcase Global AppSec - Amsterdam 2019 Project Showcase Google Summer of Code Update Google Summer of Code is now in the final stages.  Final Evaluations are due by September 2nd.   The Mentor Summit will be in Munich this year; congratulate the OWASP mentors who were picked by raffle to attend and represent OWASP: Azzeddine Ramrami & Ali Razmjoo. Google Summer of Code Update THE OWASP FOUNDATION HAS SELECTED THE TECHNICAL WRITER FOR GOOGLE SEASON OF DOCS by Fabio Cerullo The OWASP Foundation has been accepted as the organization for the Google Seasons of Docs, a project whose goals are to give technical writers an opportunity to gain experience in contributing to open source projects and to give open-source projects an opportunity to engage the technical writing community. During the program, technical writers spend a few months working closely with an open-source community. They bring their technical writing expertise to the project's documentation, and at the same time learn about open source and new technologies. The open-source projects work with the technical writers to improve the project's documentation and processes. Together they may choose to build a new documentation set, or redesign the existing docs, or improve and document the open-source community's contribution procedures and onboarding experience. Together, we raise public awareness of open source docs, of technical writing, and of how we can work together to the benefit of the global open source community. After a careful review and selection process, the OWASP Foundation has picked the primary technical writer who will work along the OWASP ZAP Team for the next 3 months to create the API documentation of this flagship project. Congratulations to Nirojan Selvanathan! Please refer to the linked document where you could look at the deliverables and work execution plan. https://drive.google.com/open?id=1kwxAzaqSuvWhis9Xn1VKNJTJZPM2UV20 COMMUNITY   Welcome New OWASP Chapters Tegucigalpa, Honduras Johannesburg, South Africa   CORPORATE SPONSORS   Join us Donate Our mailing address is: OWASP Foundation  1200-C Agora Drive, #232 Bel Air, MD 21014   Contact Us Unsubscribe

This email was sent to *|EMAIL|* why did I get this?    unsubscribe from this list    update subscription preferences *|LIST:ADDRESSLINE|*