├── .gitignore ├── 404.html ├── CONTRIBUTING.md ├── Gemfile ├── LICENSE.md ├── README.md ├── SECURITY.md ├── _config.yml ├── _leaders.md ├── assets └── images │ ├── logo-clean.png │ ├── logo.png │ └── old_2023 │ ├── logo-base.png │ ├── logo-clean.png │ ├── logo.png │ └── qr-code.png ├── docs ├── 2023 │ ├── 0x00-notice.md │ ├── INT00-about-owasp.md │ ├── INT00_2023_Introduction.md │ ├── INT01_2023-Outdated_Software.md │ ├── INT02_2023-Insufficient_Threat_Detection.md │ ├── INT03_2023-Insecure_Configurations.md │ ├── INT04_2023-Insecure_Resource_and_User_Management.md │ ├── INT05_2023-Insecure_Use_of_Cryptography.md │ ├── INT06_2023-Insecure_Network_Access_Management.md │ ├── INT07_2023-Insecure_Passwords_and_Default_Credentials.md │ ├── INT08_2023-Information_Leakage.md │ ├── INT09_2023-Insecure_Access_to_Resources_and_Management_Components.md │ ├── INT10_2023-Insufficient_Asset_Management_and_Documentation.md │ ├── INT_2023-Next_Steps.md │ └── INT_2023-Open_Call_for_Data.md └── 2024 │ ├── 0x00-notice.md │ ├── ISR00-about-owasp.md │ ├── ISR00_2024_Introduction.md │ ├── ISR01_2024-Outdated_Software.md │ ├── ISR02_2024-Insufficient_Threat_Detection.md │ ├── ISR03_2024-Insecure_Configurations.md │ ├── ISR04_2024-Insecure_Resource_and_User_Management.md │ ├── ISR05_2024-Insecure_Use_of_Cryptography.md │ ├── ISR06_2024-Insecure_Network_Access_Management.md │ ├── ISR07_2024-Insecure_Authentication_Methods_and_Default_Credentials.md │ ├── ISR08_2024-Information_Leakage.md │ ├── ISR09_2024-Insecure_Access_to_Resources_and_Management_Components.md │ ├── ISR10_2024-Insufficient_Asset_Management_and_Documentation.md │ ├── ISR_2024-Next_Steps.md │ └── ISR_2024-Open_Call_for_Data.md ├── index.md ├── info.md ├── leaders.md ├── tab_notice.md ├── tab_opencallfordata.md └── tab_sponsors.md /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/.gitignore -------------------------------------------------------------------------------- /404.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/404.html -------------------------------------------------------------------------------- /CONTRIBUTING.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/CONTRIBUTING.md -------------------------------------------------------------------------------- /Gemfile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/Gemfile -------------------------------------------------------------------------------- /LICENSE.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/LICENSE.md -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/README.md -------------------------------------------------------------------------------- /SECURITY.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/SECURITY.md -------------------------------------------------------------------------------- /_config.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/_config.yml -------------------------------------------------------------------------------- /_leaders.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/_leaders.md -------------------------------------------------------------------------------- /assets/images/logo-clean.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/assets/images/logo-clean.png -------------------------------------------------------------------------------- /assets/images/logo.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/assets/images/logo.png -------------------------------------------------------------------------------- /assets/images/old_2023/logo-base.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/assets/images/old_2023/logo-base.png -------------------------------------------------------------------------------- /assets/images/old_2023/logo-clean.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/assets/images/old_2023/logo-clean.png -------------------------------------------------------------------------------- /assets/images/old_2023/logo.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/assets/images/old_2023/logo.png -------------------------------------------------------------------------------- /assets/images/old_2023/qr-code.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/assets/images/old_2023/qr-code.png -------------------------------------------------------------------------------- /docs/2023/0x00-notice.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/docs/2023/0x00-notice.md -------------------------------------------------------------------------------- /docs/2023/INT00-about-owasp.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/docs/2023/INT00-about-owasp.md -------------------------------------------------------------------------------- /docs/2023/INT00_2023_Introduction.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/docs/2023/INT00_2023_Introduction.md -------------------------------------------------------------------------------- /docs/2023/INT01_2023-Outdated_Software.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/docs/2023/INT01_2023-Outdated_Software.md -------------------------------------------------------------------------------- /docs/2023/INT02_2023-Insufficient_Threat_Detection.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/docs/2023/INT02_2023-Insufficient_Threat_Detection.md -------------------------------------------------------------------------------- /docs/2023/INT03_2023-Insecure_Configurations.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/docs/2023/INT03_2023-Insecure_Configurations.md -------------------------------------------------------------------------------- /docs/2023/INT04_2023-Insecure_Resource_and_User_Management.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/docs/2023/INT04_2023-Insecure_Resource_and_User_Management.md -------------------------------------------------------------------------------- /docs/2023/INT05_2023-Insecure_Use_of_Cryptography.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/docs/2023/INT05_2023-Insecure_Use_of_Cryptography.md -------------------------------------------------------------------------------- /docs/2023/INT06_2023-Insecure_Network_Access_Management.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/docs/2023/INT06_2023-Insecure_Network_Access_Management.md -------------------------------------------------------------------------------- /docs/2023/INT07_2023-Insecure_Passwords_and_Default_Credentials.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/docs/2023/INT07_2023-Insecure_Passwords_and_Default_Credentials.md -------------------------------------------------------------------------------- /docs/2023/INT08_2023-Information_Leakage.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/docs/2023/INT08_2023-Information_Leakage.md -------------------------------------------------------------------------------- /docs/2023/INT09_2023-Insecure_Access_to_Resources_and_Management_Components.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/docs/2023/INT09_2023-Insecure_Access_to_Resources_and_Management_Components.md -------------------------------------------------------------------------------- /docs/2023/INT10_2023-Insufficient_Asset_Management_and_Documentation.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/docs/2023/INT10_2023-Insufficient_Asset_Management_and_Documentation.md -------------------------------------------------------------------------------- /docs/2023/INT_2023-Next_Steps.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/docs/2023/INT_2023-Next_Steps.md -------------------------------------------------------------------------------- /docs/2023/INT_2023-Open_Call_for_Data.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/docs/2023/INT_2023-Open_Call_for_Data.md -------------------------------------------------------------------------------- /docs/2024/0x00-notice.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/docs/2024/0x00-notice.md -------------------------------------------------------------------------------- /docs/2024/ISR00-about-owasp.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/docs/2024/ISR00-about-owasp.md -------------------------------------------------------------------------------- /docs/2024/ISR00_2024_Introduction.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/docs/2024/ISR00_2024_Introduction.md -------------------------------------------------------------------------------- /docs/2024/ISR01_2024-Outdated_Software.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/docs/2024/ISR01_2024-Outdated_Software.md -------------------------------------------------------------------------------- /docs/2024/ISR02_2024-Insufficient_Threat_Detection.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/docs/2024/ISR02_2024-Insufficient_Threat_Detection.md -------------------------------------------------------------------------------- /docs/2024/ISR03_2024-Insecure_Configurations.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/docs/2024/ISR03_2024-Insecure_Configurations.md -------------------------------------------------------------------------------- /docs/2024/ISR04_2024-Insecure_Resource_and_User_Management.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/docs/2024/ISR04_2024-Insecure_Resource_and_User_Management.md -------------------------------------------------------------------------------- /docs/2024/ISR05_2024-Insecure_Use_of_Cryptography.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/docs/2024/ISR05_2024-Insecure_Use_of_Cryptography.md -------------------------------------------------------------------------------- /docs/2024/ISR06_2024-Insecure_Network_Access_Management.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/docs/2024/ISR06_2024-Insecure_Network_Access_Management.md -------------------------------------------------------------------------------- /docs/2024/ISR07_2024-Insecure_Authentication_Methods_and_Default_Credentials.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/docs/2024/ISR07_2024-Insecure_Authentication_Methods_and_Default_Credentials.md -------------------------------------------------------------------------------- /docs/2024/ISR08_2024-Information_Leakage.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/docs/2024/ISR08_2024-Information_Leakage.md -------------------------------------------------------------------------------- /docs/2024/ISR09_2024-Insecure_Access_to_Resources_and_Management_Components.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/docs/2024/ISR09_2024-Insecure_Access_to_Resources_and_Management_Components.md -------------------------------------------------------------------------------- /docs/2024/ISR10_2024-Insufficient_Asset_Management_and_Documentation.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/docs/2024/ISR10_2024-Insufficient_Asset_Management_and_Documentation.md -------------------------------------------------------------------------------- /docs/2024/ISR_2024-Next_Steps.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/docs/2024/ISR_2024-Next_Steps.md -------------------------------------------------------------------------------- /docs/2024/ISR_2024-Open_Call_for_Data.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/docs/2024/ISR_2024-Open_Call_for_Data.md -------------------------------------------------------------------------------- /index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/index.md -------------------------------------------------------------------------------- /info.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/info.md -------------------------------------------------------------------------------- /leaders.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/leaders.md -------------------------------------------------------------------------------- /tab_notice.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/tab_notice.md -------------------------------------------------------------------------------- /tab_opencallfordata.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/tab_opencallfordata.md -------------------------------------------------------------------------------- /tab_sponsors.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OWASP/www-project-top-10-infrastructure-security-risks/HEAD/tab_sponsors.md --------------------------------------------------------------------------------