Top 4 appsec-tutorials open source projects

vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios through Exercises.

Some good resources for getting started with application security

Java Agent is a Java application probe of DongTai IAST, which collects method invocation data during runtime of Java application by dynamic hooks.

Additional Resources For Securing The Stack Tutorials