technology software

government public service

forum

English

searchString

html/02/f1/02f18322-0b60-415d-955d-9b67423183e7.html.gz

default-src 'self' https://*.fontawesome.com https://api.github.com https://*.githubusercontent.com https://*.google-analytics.com https://owaspadmin.azurewebsites.net https://*.twimg.com https://platform.twitter.com https://www.youtube.com https://*.doubleclick.net; frame-ancestors 'self'; frame-src https://*.vuejs.org https://*.stripe.com https://*.wufoo.com https://*.sched.com https://*.google.com https://*.twitter.com https://www.youtube.com https://w.soundcloud.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://viewer.diagrams.net https://fonts.googleapis.com https://*.fontawesome.com https://app.diagrams.net https://cdnjs.cloudflare.com https://cse.google.com https://*.vuejs.org https://*.stripe.com https://*.wufoo.com https://*.youtube.com https://*.meetup.com https://*.sched.com https://*.google-analytics.com https://unpkg.com https://buttons.github.io https://www.google.com https://*.gstatic.com https://*.twitter.com https://*.twimg.com; style-src 'self' 'unsafe-inline' https://*.gstatic.com https://cdnjs.cloudflare.com https://www.google.com https://fonts.googleapis.com https://platform.twitter.com https://*.twimg.com data:; font-src 'self' https://*.fontawesome.com fonts.gstatic.com; manifest-src 'self' https://pay.google.com; img-src 'self' https://*.globalappsec.org https://render.com https://*.render.com https://okteto.com https://*.okteto.com data: www.w3.org https://*.bestpractices.dev https://licensebuttons.net https://img.shields.io https://*.twitter.com https://github.githubassets.com https://*.twimg.com https://platform.twitter.com https://*.githubusercontent.com https://*.vercel.app https://*.cloudfront.net https://*.coreinfrastructure.org https://*.securityknowledgeframework.org https://badges.gitter.im https://travis-ci.org https://api.travis-ci.org https://s3.amazonaws.com https://snyk.io https://coveralls.io https://requires.io https://github.com https://*.googleapis.com https://*.google.com https://*.gstatic.com

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:225:0

require-trusted-types-for 'script';report-uri /calendar/cspreport
script-src 'report-sample' 'nonce-DWWxhq1rP6Dc_1LLMhnzkw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /calendar/cspreport
require-trusted-types-for 'script';report-uri /calendar/cspreport

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/calendar-dev

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

582cc085dd8fea044917d1efde838e77e845262fd025bbfe0339f808607c81f6

f1a61277e3f902f50ab42015d8b07218db9b7601bb0967e54a52bfdcb4fa7e81

fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a

cbe2121765e2f3e921a42bcb9b0c78635b68cee1dccd1b1ec31089b9382ff514

b8ccdf0e45f181fc04f0d202779fff71aa76f27f0428a792e0e6f13fe1d0b085

53d3b023092e049484c4e39ce6f50d1b8dd10074795e66da06e1140792a91d9a

viewport

OWASP Foundation, the Open Source Foundation for Application Security on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software.

description

OWASP Foundation, the Open Source Foundation for Application Security | OWASP Foundation

https://owasp.org/www--site-theme/favicon.ico

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Domains Abuse

GoDaddy.com, LLC

owasp.org

Abuse

Google LLC

GOOGLE


  if(Cookies.get('cookies-ok') == 'true' && window.ga === undefined)
  {
    window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)};ga.l=+new Date;
    ga('create', 'UA-4531126-1', 'auto');


      $(function(){
        var baseurl = "https://github.com/OWASP/owasp.github.io/blob/master/";
        var path = "index.md";
        $('.repo').html('<a href=' + baseurl + path + '><div class="r


  $(function () {
    var bannerdata = [];
    banneryaml = YAML.load('https://owasp.org/assets/sitedata/banner-data.yml');
    $.each(banneryaml, function (index) {
      bannerdata.push(this);
    


  $(function () {
    var popdata = [];
    $("#popup").hide();
    popyaml = YAML.load('https://owasp.org/assets/sitedata/popup-data.yml');
    $.each(popyaml, function (index) {
      popdata.push(


  $(function(){
      
      url = $(location).attr('href');
      if(url.includes('www2'))
      {
        url = url.replace(/www2./, '');
        $(location).attr('href',url);
        return;
     


  $(function(){
      numdivs = 4;

      id = Math.floor(Math.random() * numdivs);
      strdiv = "ev" + id;
      $('#' + strdiv).show();
  });



var mtxt = "[{\"name\":\"Amass\",\"repo\":\"www-project-amass\",\"shortname\":\"Amass\",\"mediablurb\":\"Visualize your network attack surfaces and external assets\"},{\"name\":\"Application Security


    var members = [];
    var plat_indices = [];
    var gold_indices = [];
    var other_indices = [];

    function get_next_member(members, indexUsed){
      // random 6
      // 0 to 2 = Platinum

Requests	IP Address	Location	AS Autonomous System
16	142.250.184.206	United States	AS15169GOOGLE
2	104.20.44.163	United States	AS13335CLOUDFLARENET
2	172.217.18.110	United States	AS15169GOOGLE
2	216.58.212.174	United States	AS15169GOOGLE
2	172.217.18.14	United States	AS15169GOOGLE
2	142.250.186.131	United States	AS15169GOOGLE
2	142.250.185.142	United States	AS15169GOOGLE
2	216.58.206.67	United States	AS15169GOOGLE
2	172.66.157.115	United States	AS13335CLOUDFLARENET
2	2606:4700:10::ac42:9d73	United States	Unknown
59	18	-	-

Security Scan Report: owasp.org

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History