Security - sgml/signature GitHub Wiki

False Assumptions

cognitive dissonance	Structure	problems	false assumptions	Idiom (Wikiquote)
assuming precision guarantees safety	assuming P leads to Q	trusting trust	In this scenario the reader assumes that careful work implies safe work and therefore omits verifying the trust chain which allows a substitution attack to succeed	Measure twice, cut once
believing correct output implies correct authority	assuming Q implies P	the confused deputy	Here the reader infers that correct results must come from a correct authority and therefore fails to separate capability from identity which enables unintended privilege use	Dont judge a book by its cover
thinking missing rigor only affects minor details	assuming not P leads to not Q	man in the middle	In this explanation the reader treats small lapses as harmless and therefore does not validate the communication path which allows an interceptor to alter or observe messages	The devil is in the details
treating bad outcomes as unrelated to flawed reasoning	assuming not Q implies not P	phishing	In this narrative the reader assumes that deception must be obvious and therefore does not examine subtle inconsistencies which allows an attacker to imitate a trusted source	Where theres smoke theres fire
assuming attention to detail can contradict results	assuming P leads to not Q	clickjacking	In this description the reader believes that visible interface elements reflect actual behavior and therefore does not inspect hidden overlays which allows an attacker to redirect actions	A wolf in sheeps clothing

Basics

evaluating python code inside curly brackets
put expressions in form fields
see if an expression evaluates by looking for it in the dev tools
if it does, try to grab data from that scope in the devtools
if that works, try the equivalent in the form field

Offensive

Tools

Framework-Specific Access Control Tools

Here are some access control tools for various frameworks, along with their GitHub repositories:

Flask

Flask-Security: Provides authentication, authorization, and role-based access control (RBAC).
Flask-Principal: Allows for role-based access control and permission management.
Flask-User: Manages user accounts, roles, and permissions.

Django

Django Guardian: A flexible, policy-based authorization framework.
Django-Roles: Simplifies role-based access control.
Django-Permissions: Provides a comprehensive permissions system.

FastAPI

FastAPI-JWT: Provides JSON Web Token (JWT) based authentication and authorization.
FastAPI-Auth: Offers various authentication methods including JWT and OAuth2.

Laravel

Laravel Sanctum: Provides a lightweight authentication system for single-page applications, token-based APIs, and simple, token-based "Guard" implementations.
Laravel Passport: An OAuth2 server implementation for Laravel.
Laravel Gates and Policies (part of Laravel framework): Built-in features for authorization.

Drupal

Drupal Access Control: Built-in access control system with roles and permissions.
Rules Module: Allows for custom access control rules.
Group Module: Manages user groups for access control.

Symfony

Symfony Security: A comprehensive security component for authentication and authorization.
Lexik JWT Authentication Bundle: Provides JWT-based authentication.
HWIOAuthBundle: Supports OAuth2 authentication.

AEM

Access Control Tool: AEM RBAC

Side Channel

Another type of non-intrusive but challenging-to-prevent attack is a "Side-Channel Attack". This attack gathers information from the physical implementation of a system rather than exploiting software vulnerabilities. Examples include:

Power Analysis Attacks: Observing the power consumption of a device to extract cryptographic keys.
Electromagnetic Attacks: Monitoring electromagnetic emissions from electronic devices to gather sensitive data.
Timing Attacks: Analyzing the time taken to execute cryptographic algorithms to uncover private information.

Side-channel attacks can be particularly difficult to guard against because they exploit indirect information leaks rather than breaking through conventional security measures.