threatdragon / threatdragon.github.io Goto Github PK

OWASP Threat Dragon website

License: Apache License 2.0

Ruby 83.91% CSS 16.09%

owasp owasp-threat-dragon threat-dragon threat-modeling sdlc

threatdragon.github.io's Introduction

OWASP Threat Dragon

This repo provides the documentation site for Threat Dragon. Mike Goodwin created Threat Dragon as an open source community project that provides an intuitive and accessible way to model threats.

Threat Dragon is a threat modelling application which provides model diagramming and a rule engine to auto-generate threats/mitigations. Threat Dragon is an OWASP Lab Project run by volunteers. There is always plenty to do so please contribute your ideas and time if you can.

Testing the docs pages

make sure you have jekyll installed, following the github docs
install with bundle install
run the site locally with bundle exec jekyll serve
browse to http://localhost:4000/ to check all is good
build the site with bundle exec jekyll build

Project leaders:

threatdragon.github.io's People

Contributors

Stargazers

Watchers

threatdragon.github.io's Issues

ZAP Scan Baseline Report

Site: https://threatdragon.github.io
New Alerts
- Cross-Domain Misconfiguration [10098] total: 11:
- Missing Anti-clickjacking Header [10020] total: 11:
- Timestamp Disclosure - Unix [10096] total: 276:
- X-Content-Type-Options Header Missing [10021] total: 11:
- Base64 Disclosure [10094] total: 8:
- Modern Web Application [10109] total: 11:
- Re-examine Cache-control Directives [10015] total: 11:
- Retrieved from Cache [10050] total: 12:
- Storable and Cacheable Content [10049] total: 11:
Ignored Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 11:
- Source Code Disclosure - PHP [10099] total: 3:
- Source Code Disclosure - SQL [10099] total: 1:

View the following link to download the report.
RunnerID:2646969485

Permissions failure opening Mac desktop app

Reported in #439 'Permissions failure opening Mac desktop app', the .zip file does not work on all MacOS. Needs to be made clear in these docs, at public/pages/install/install-desktop.markdown

ZAP Scan Baseline Report

Site: http://docs.threatdragon.org
Ignored Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 1:
- Feature Policy Header Not Set [10063] total: 1:
- Storable and Cacheable Content [10049] total: 1:
- Cross-Domain Misconfiguration [10098] total: 1:
- Modern Web Application [10109] total: 1:
- X-Frame-Options Header Not Set [10020] total: 1:
- Retrieved from Cache [10050] total: 1:
- X-Content-Type-Options Header Missing [10021] total: 1:
Site: https://threatdragon.github.io
New Alerts
- Strict-Transport-Security Header Not Set [10035] total: 3:
Ignored Alerts
- Retrieved from Cache [10050] total: 4:
- Storable and Cacheable Content [10049] total: 3:

View the following link to download the report.
RunnerID:739586466

Site: http://docs.threatdragon.org
Ignored Alerts
- Content Security Policy (CSP) Header Not Set [10038] total: 1:
- Feature Policy Header Not Set [10063] total: 1:
- Storable and Cacheable Content [10049] total: 1:
- Cross-Domain Misconfiguration [10098] total: 1:
- Modern Web Application [10109] total: 1:
- X-Frame-Options Header Not Set [10020] total: 1:
- Retrieved from Cache [10050] total: 1:
- X-Content-Type-Options Header Missing [10021] total: 1:
Site: https://threatdragon.github.io
New Alerts
- Timestamp Disclosure - Unix [10096] total: 1:
  - https://threatdragon.github.io/
Ignored Alerts
- Retrieved from Cache [10050] total: 4:
- Strict-Transport-Security Header Not Set [10035] total: 3:
- Storable and Cacheable Content [10049] total: 3:

View the following link to download the report.
RunnerID:784043729

ZAP Scan Baseline Report

Site: https://threatdragon.github.io
New Alerts
- Timestamp Disclosure - Unix [10096] total: 11:
Ignored Alerts
- X-Frame-Options Header Not Set [10020] total: 11:
- Storable and Cacheable Content [10049] total: 11:
- Cross-Domain Misconfiguration [10098] total: 11:
- X-Content-Type-Options Header Missing [10021] total: 11:
- Feature Policy Header Not Set [10063] total: 11:
- Incomplete or No Cache-control and Pragma HTTP Header Set [10015] total: 11:
- Retrieved from Cache [10050] total: 12:
- Content Security Policy (CSP) Header Not Set [10038] total: 11:
- Modern Web Application [10109] total: 11:
- Source Code Disclosure - SQL [10099] total: 1:

View the following link to download the report.
RunnerID:696475861

threatdragon / threatdragon.github.io Goto Github PK

threatdragon.github.io's Introduction

OWASP Threat Dragon

Testing the docs pages

Project leaders:

threatdragon.github.io's People

Contributors

Stargazers

Watchers

threatdragon.github.io's Issues

Recommend Projects

Recommend Topics

Recommend Org