The Tea app breach highlights how weak back-end security can expose sensitive user data. Learn essential strategies for access control, data lifecycle management and third-party risk reduction.
The post Mobile App Platforms: Don’t Let Database Security Come Back to Bite You appeared first on Security Boulevard.
Yet Another Testing & Auditing Solution
The goal of YATAS is to help you create a secure AWS environment without too much hassle. It won't check for all best practices but only for the ones that are important for you based on my experience. Please feel free to tell me if you find something that is not covered.
YATAS is a simple and easy to use tool to audit your infrastructure for misconfiguration or potential security issues.
| No details | Details |
|---|---|
| |
Loginbrew tap padok-team/tap
brew install yatasyatas --initModify .yatas.yml to your needs.
yatas --installInstalls the plugins you need.
yatas -hFlags:
--details: Show details of the issues found.--compare: Compare the results of the previous run with the current run and show the differences.--ci: Exit code 1 if there are issues found, 0 otherwise.--resume: Only shows the number of tests passing and failing.--time: Shows the time each test took to run in order to help you find bottlenecks.--init: Creates a .yatas.yml file in the current directory.--install: Installs the plugins you need.--only-failure: Only show the tests that failed.| Plugins | Description | Checks |
|---|---|---|
| AWS Audit | AWS checks | Good practices and security checks |
| Markdown Reports | Reporting | Generates a markdown report |
You can ignore results of checks by adding the following to your .yatas.yml file:
ignore:
- id: "AWS_VPC_004"
regex: true
values:
- "VPC Flow Logs are not enabled on vpc-.*"
- id: "AWS_VPC_003"
regex: false
values:
- "VPC has only one gateway on vpc-08ffec87e034a8953"You can exclude a test by adding the following to your .yatas.yml file:
plugins:
- name: "aws"
enabled: true
description: "Check for AWS good practices"
exclude:
- AWS_S3_001To only run a specific test, add the following to your .yatas.yml file:
plugins:
- name: "aws"
enabled: true
description: "Check for AWS good practices"
include:
- "AWS_VPC_003"
- "AWS_VPC_004"You can get the error logs by adding the following to your env variables:
export YATAS_LOG_LEVEL=debugThe available log levels are: debug, info, warn, error, fatal, panic and off by default
You'd like to add a new plugin ? Then simply visit yatas-plugin and follow the instructions.
What is CyberPanel? CyberPanel is a web hosting control panel that comes with OpenLiteSpeed Server, CyberPanel is an alternative to cPanel, CyberPanel is ...
The post CyberPanel Install on Vultr appeared first on HackNos.
In this article, We are going to configure Nameserver on CyberPanel, and we will talk about what is nameserver, and why we ...
The post CyberPanel NameServer Configure appeared first on HackNos.
Today We are going to talk about how to Stop directory listing on Apache Web Server, In this post, I used my ...
The post Apache Stop Directory Listing appeared first on HackNos.
The post Common security misconfigurations and remediations appeared first on Detectify Blog.
The post OWASP TOP 10: Security Misconfiguration appeared first on Detectify Blog.
Yet Another Testing & Auditing Solution
The goal of YATAS is to help you create a secure AWS environment without too much hassle. It won't check for all best practices but only for the ones that are important for you based on my experience. Please feel free to tell me if you find something that is not covered.
YATAS is a simple and easy to use tool to audit your infrastructure for misconfiguration or potential security issues.
| No details | Details |
|---|---|
| |
brew tap padok-team/tap
brew install yatasyatas --initModify .yatas.yml to your needs.
yatas --installInstalls the plugins you need.
yatas -hFlags:
--details: Show details of the issues found.--compare: Compare the results of the previous run with the current run and show the differences.--ci: Exit code 1 if there are issues found, 0 otherwise.--resume: Only shows the number of tests passing and failing.--time: Shows the time each test took to run in order to help you find bottlenecks.--init: Creates a .yatas.yml file in the current directory.--install: Installs the plugins you need.--only-failure: Only show the tests that failed.| Plugins | Description | Checks |
|---|---|---|
| AWS Audit | AWS checks | Good practices and security checks |
| Markdown Reports | Reporting | Generates a markdown report |
You can ignore results of checks by adding the following to your .yatas.yml file:
ignore:
- id: "AWS_VPC_004"
regex: true
values:
- "VPC Flow Logs are not enabled on vpc-.*"
- id: "AWS_VPC_003"
regex: false
values:
- "VPC has only one gateway on vpc-08ffec87e034a8953"You can exclude a test by adding the following to your .yatas.yml file:
plugins:
- name: "aws"
enabled: true
description: "Check for AWS good practices"
exclude:
- AWS_S3_001To only run a specific test, add the following to your .yatas.yml file:
plugins:
- name: "aws"
enabled: true
description: "Check for AWS good practices"
include:
- "AWS_VPC_003"
- "AWS_VPC_004"You can get the error logs by adding the following to your env variables:
export YATAS_LOG_LEVEL=debugThe available log levels are: debug, info, warn, error, fatal, panic and off by default
You'd like to add a new plugin ? Then simply visit yatas-plugin and follow the instructions.
