GreenSQL – Open Source Database Firewall Software

GreenSQL is an Open Source database firewall used to protect databases from SQL injection attacks. GreenSQL works as a proxy and has built in support for MySQL. The logic is based on evaluation of SQL commands using a risk scoring matrix as well as blocking known db administrative commands (DROP, CREATE, etc). GreenSQL provides MySQL database security solution. GreenSQL is distributed under the GPL license.














More info here : http://www.greensql.net/

How to break web software(Video)

What Every Web Programmer Needs To Know About Security

Contains
Foundations of Security
secure design principles
common web application vulnerabilities
an introduction to cryptography
and much more



http://code.google.com/edu/submissions/daswani/index.html

Browser security reference

This is reference to key security properties of contemporary web browsers. Insufficient understanding of these often poorly-documented characteristics is a major contributing factor to the prevalence of several classes of security vulnerabilities.

http://code.google.com/p/browsersec/wiki/Main

Auditing tool for security

Rough Auditing Tool for Security – is an open source tool developed and maintained by Secure Software security engineers

RATS is a tool for scanning C, C++, Perl, PHP and Python source code and flagging common security related programming errors such as buffer overflows and TOCTOU (Time Of Check, Time Of Use) race conditions

http://www.darknet.org.uk/2009/11/rats-rough-auditing-tool-for-security/

FireCAT Firefox catlogue for auditing

FireCAT is a Firefox Framework Map collection of the most useful security oriented extensions.

http://www.security-database.com/toolswatch/FireCAT-Firefox-Catalog-of,232.html

Collection of Extensions to Turn Firefox Into a Security Platform

Graudit – Code Audit Tool Using Grep

Graudit is a simple script and signature sets that allows you to find potential security flaws in source code using the GNU utility grep. It’s comparable to other static analysis applications like RATS, SWAAT and flaw-finder while keeping the technical requirements to a minimum and being very flexible

http://www.darknet.org.uk/2009/09/graudit-code-audit-tool-using-grep/

MySqloit , SQL Injection Takeover Tool For LAMP

MySqloit is a SQL Injection takeover tool focused on LAMP (Linux, Apache, MySQL, PHP) and WAMP (Windows, Apache, MySQL, PHP) platforms. It has the ability to upload and execute metasploit shellcodes through the MySql SQL Injection vulnerabilities.

http://www.darknet.org.uk/2009/09/mysqloit-sql-injection-takeover-tool-for-lamp/

Setting up users Groups and permissions in sfGuard

http://www.ryan-h.com/web-development/symfony-sfguard-setting-up-usersgroupspermissions/