Fun Links 2013-09-13


With the penetration testers here recently, it felt appropriate to have a security themed set of links this week.

Stanford JavaScript Crypto Library
http://crypto.stanford.edu/sjcl/
As the name suggests a crypto library for JavaScript, with a pretty comprehensive set of tools available. Provides a way to securely store information in the browser for use within your application.

Cap
https://github.com/mscdex/cap
A packet capturing library for node.js. Works with Windows and *nix with help from external libraries.

Signobj
https://github.com/Submersible/node-signobj
A JavaScript library to sign and verify data with a secret. If encryption isn’t necessary, and you need to detect tampering, you can use this simple promise-based library.

OWASP .NET Cheat sheet
https://www.owasp.org/index.php/.NET_Security_Cheat_Sheet
A list of useful security tips when developing .NET applications. At the bottom of the page is a list of links to other cheat sheets. Certainly worth a browse around. OWASP is generally a good resource for web security information.

Written by Colin Bate