Anotaes

Curso Auditoria de Segurana em Aplicaes Web EAD Aula 4 Agosto de 2013

OWASP Testing Guide v3

https://www.owasp.org/index.php/OWASP_Testing_Guide_v3_Table_of_Contents

SSL e TLS
http://www.howstuffworks.com/encryption4.htm

Guia de Referncia do Nmap

http://nmap.org/man/pt_BR/

Webinar #14 Teste de Invaso com o Nmap Scripting Engine Clavis

http://www.blog.clavis.com.br/webinar-14-teste-de-invasao-com-o-nmap-scripting-engine/

Utilizando o Nmap Scripting Engine (NSE)

http://www.blog.clavis.com.br/utilizando-o-nmap-scripting-engine-nse-funcionalidade-do-nmap-
que-permite-executar-scripts-do-usuario/

Documentao Nmap Scripting Engine

http://nmap.org/nsedoc/

SSL Labs Qualys

https://www.ssllabs.com/ssltest/index.html
Load Balancer
http://pt.wikipedia.org/wiki/Balanceamento_de_carga#Balanceamento_de_rede

Web Application Firewall - WAF

https://www.owasp.org/index.php/Web_Application_Firewall

Nikto
http://www.cirt.net/nikto2

Nessus
http://www.tenable.com/products/nessus

QualysGuard
http://www.qualys.com/enterprises/qualysguard/

OSVDB
http://www.osvdb.org/

Metasploit
http://www.rapid7.com/products/metasploit/

Curso Metasploit EAD Clavis

http://www.clavis.com.br/treinamento-ensino-a-distancia-ead/metasploit-framework-ferramenta-
para-teste-de-invasao/index.php

Wireshark
http://www.wireshark.org/

dsniff
http://www.monkey.org/~dugsong/dsniff/

Hydra
http://www.thc.org/thc-hydra/
CAPTCHA
http://www.tecmundo.com.br/curiosidade/2861-o-que-e-captcha-.htm

Japons dribla leitor de impresso digital

http://www1.unimed.com.br/nacional/bom_dia/informatica/info.asp?nt=17987

Apresentao Rafael Santos - Cdigos QR

http://www.gris.dcc.ufrj.br/documentos/apresentacoes/seguranca-em-codigos-
qr/at_download/file

CSRF
https://www.owasp.org/index.php/Cross-Site_Request_Forgery_(CSRF)

(CSRF) Prevention Cheat Sheet

https://www.owasp.org/index.php/Cross-
Site_Request_Forgery_(CSRF)_Prevention_Cheat_Sheet

OWASP CSRF Guard

https://www.owasp.org/index.php/Category:OWASP_CSRFGuard_Project

sqlmap
http://sqlmap.org/

Clavis Webinar # 16 Ataques de Fora Bruta

http://www.blog.clavis.com.br/webinar-16-ataques-de-forca-bruta-metodo-dicionario-hibridos-e-
rainbow-tables/

Site de teste do Acunetix

http://testasp.vulnweb.com/Login.asp?RetURL=%2FDefault%2Easp%3F

SQL Wildcards
http://www.w3schools.com/sql/sql_wildcards.asp
AJAX
http://codigofonte.uol.com.br/artigos/ajax-asynchronous-javascript-and-xml

Cursos a Distncia - Academia Clavis

http://www.clavis.com.br/treinamento-ensino-a-distancia-ead/index.php

Testing Guide v3
https://www.owasp.org/images/5/56/OWASP_Testing_Guide_v3.pdf

Comando Script
http://www.vivaolinux.com.br/dica/O-comando-script