返回排行榜

Golang Secure Coding Practices guide

appsecgolang
Star 增长趋势
Star
5.3k
Forks
406
周增长
Issues
16
2k3k4k5k
2017年4月2020年5月2023年6月2026年7月
制品库Go Modulesgo get github.com/OWASP/Go-SCP
README

You can download this book in the following formats: PDF, Mobi and ePub.

Introduction

Go Language - Web Application Secure Coding Practices is a guide written for anyone who is using the Go Programming Language and aims to use it for web development.

It was originally created by Checkmarx Security Research Team and later donated to the OWASP Foundation: see the project page. The book follows the OWASP Secure Coding Practices - Quick Reference Guide v2 (stable) release.

The main goal of this book is to help developers avoid common mistakes while at the same time, learning a new programming language through a "hands-on approach". This book provides a good level of detail on "how to do it securely" showing what kind of security problems could arise during development.

The Audience for this Book

The primary audience of the Go Secure Coding Practices Guide is developers, particularly the ones with previous experience with other programming languages.

The book is also a great reference to those learning programming for the first time, who have already finish the Go tour.

What You Will Learn

This book covers the OWASP Secure Coding Practices Guide topic-by-topic, providing examples and recommendations using Go, to help developers avoid common mistakes and pitfalls.

After reading this book, you'll be more confident you're developing secure Go applications.

About OWASP Secure Coding Practices

This book was adapted for Go Language from The Secure Coding Practices Quick Reference Guide, an OWASP - Open Web Application Security Project. It is a "technology agnostic set of general software security coding practices, in a comprehensive checklist format, that can be integrated into the development lifecycle" (source).

OWASP itself is "an open community dedicated to enabling organizations to conceive, develop, acquire, operate, and maintain applications that can be trusted. All of the OWASP tools, documents, forums, and chapters are free and open to anyone interested in improving application security" (source).

How to Contribute

This book was created using a few open source tools. If you're curious about how we built it from scratch, read the How To contribute section.

License

This document is released under the Creative Commons Attribution-ShareAlike 4.0 International license (CC BY-SA 4.0). For any reuse or distribution, you must make clear to others the license terms of this work. https://creativecommons.org/licenses/by-sa/4.0/

相关仓库
sqlmapproject/sqlmap

Automatic SQL injection and database takeover tool

PythonPyPIOthersql-injectiondetection
sqlmap.org
38k6.3k
OWASP/CheatSheetSeries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

PythonPyPICreative Commons Attribution Share Alike 4.0 Internationalowaspcode
cheatsheetseries.owasp.org
32.6k4.5k
chaitin/SafeLine

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

GoGo ModulesGNU General Public License v3.0firewallhttp-flood
ly.safepoint.cloud/fUxS0GW
21.9k1.4k
zaproxy/zaproxy

The ZAP by Checkmarx Core project

JavaMavenApache License 2.0zapzap-development
zaproxy.org
15.4k2.6k
maurosoria/dirsearch

Web path scanner

PythonPyPIfuzzerfuzzing
14.5k2.4k
juice-shop/juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

TypeScriptnpmMIT Licenseowaspjavascript
owasp-juice.shop
13.5k18.7k
OWASP/wstg

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

Creative Commons Attribution Share Alike 4.0 Internationalbest-practicesguide
owasp.org/www-project-web-security-testing-guide/
9.6k1.6k
infoslack/awesome-web-hacking

A list of web application security

MIT Licensepenetration-testingweb-hacking
7.1k1.3k
urbanadventurer/WhatWeb

Next generation web scanner

RubyRubyGemsGNU General Public License v2.0securityweb
morningstarsecurity.com/research/whatweb
6.7k1k
microsoft/Security-101

8 Lessons, Kick-start Your Cybersecurity Learning.

HTMLCreative Commons Zero v1.0 Universalappseccia-triad
microsoft.github.io/Security-101/
6.7k908
infobyte/faraday

Open Source Vulnerability Management Platform

PythonPyPIGNU General Public License v3.0devopspenetration-testing
faradaysec.com
6.7k1.1k
jassics/security-study-plan

Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...

aws-securitystudy-guide
cybercloud.guru
5k630