All Projects → OWASP → Cheatsheetseries

OWASP / Cheatsheetseries

Licence: other
The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

Programming Languages

python
139335 projects - #7 most used programming language
shell
77523 projects
HTML
75241 projects
java
68154 projects - #9 most used programming language
Makefile
30231 projects

Projects that are alternatives of or similar to Cheatsheetseries

Wstg
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
Stars: ✭ 3,873 (-79.93%)
Mutual labels:  best-practices, owasp, appsec, application-security
Resources-for-Application-Security
Some good resources for getting started with application security
Stars: ✭ 97 (-99.5%)
Mutual labels:  owasp, application-security, appsec
juice-shop
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
Stars: ✭ 7,533 (-60.97%)
Mutual labels:  owasp, application-security, appsec
Securityrat
OWASP SecurityRAT (version 1.x) - Tool for handling security requirements in development
Stars: ✭ 115 (-99.4%)
Mutual labels:  owasp, appsec, application-security
Juice Shop
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
Stars: ✭ 6,270 (-67.52%)
Mutual labels:  owasp, appsec, application-security
Whatweb
Next generation web scanner
Stars: ✭ 3,503 (-81.85%)
Mutual labels:  owasp, appsec, application-security
www-project-zap
OWASP Zed Attack Proxy project landing page.
Stars: ✭ 52 (-99.73%)
Mutual labels:  owasp, appsec
nodejssecurity
Documentation for Essential Node.js Security
Stars: ✭ 64 (-99.67%)
Mutual labels:  owasp, appsec
nerdbug
Full Nuclei automation script with logic explanation.
Stars: ✭ 153 (-99.21%)
Mutual labels:  application-security, appsec
Software-Component-Verification-Standard
Software Component Verification Standard (SCVS)
Stars: ✭ 82 (-99.58%)
Mutual labels:  best-practices, owasp
Cheatsheets
Quick reference material for techies
Stars: ✭ 66 (-99.66%)
Mutual labels:  code, cheatsheets
www-project-vulnerable-web-applications-directory
The OWASP Vulnerable Web Applications Directory (VWAD) Project - OWASP Web Site
Stars: ✭ 10 (-99.95%)
Mutual labels:  owasp, appsec
vapi
vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios through Exercises.
Stars: ✭ 674 (-96.51%)
Mutual labels:  owasp, appsec
zap-sonar-plugin
Integrates OWASP Zed Attack Proxy reports into SonarQube
Stars: ✭ 66 (-99.66%)
Mutual labels:  owasp, appsec
tutorials
Additional Resources For Securing The Stack Tutorials
Stars: ✭ 36 (-99.81%)
Mutual labels:  owasp, appsec
dependency-check-plugin
Jenkins plugin for OWASP Dependency-Check. Inspects project components for known vulnerabilities (e.g. CVEs).
Stars: ✭ 107 (-99.45%)
Mutual labels:  owasp, appsec
juice-shop-ctf
Capture-the-Flag (CTF) environment setup tools for OWASP Juice Shop supporting CTFd, FBCTF and RootTheBox
Stars: ✭ 287 (-98.51%)
Mutual labels:  owasp, application-security
gha-setup-scancentral-client
GitHub Action to set up Fortify ScanCentral Client
Stars: ✭ 15 (-99.92%)
Mutual labels:  application-security, appsec
Application Security Engineer Interview Questions
Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exhaustive list but i felt these questions were important to be asked and some were challenging to answer
Stars: ✭ 267 (-98.62%)
Mutual labels:  appsec, application-security
LearningResources
A centralised hub for learner around the globe from A-Z. You can find collections of manuals, blogs, hacks, one liners, courses, other free learning-resources and more
Stars: ✭ 63 (-99.67%)
Mutual labels:  best-practices, cheatsheets

Welcome to the OWASP Cheat Sheet Series

OWASP Flagship Creative Commons License

Welcome to the official repository for the Open Web Application Security Project® (OWASP) Cheat Sheet Series project. The project focuses on providing good security practices for builders in order to secure their applications.

In order to read the cheat sheets and reference them, use the project official website. The project details can be viewed on the OWASP main website without the cheat sheets.

🚩 Markdown files are the working sources and aren't intended to be referenced in any external documentation, books or websites.

Cheat Sheet Series Team

Project Leaders

Chat With Us

We're easy to find on Slack:

  1. Join the OWASP Group Slack with this invitation link.
  2. Join the #cheatsheets channel.

Feel free to ask questions, suggest ideas, or share your best recipes.

Contributions, Feature Requests, and Feedback

We are actively inviting new contributors! To start, please read the contribution guide.

This project is only possible thanks to the work of many dedicated volunteers. Everyone is encouraged to help in ways large and small. Here are a few ways you can help:

  • Read the current content and help us fix any spelling mistakes or grammatical errors.
  • Choose an existing issue on GitHub and submit a pull request to fix it.
  • Open a new issue to report an opportunity for improvement.

Automated Build

This link allows you to download a build (ZIP archive) of the offline website.

Local build pyVersion3x

The OWASP Cheat Sheet Series website can be built and tested locally by issuing the following commands:

make install-python-requirements
make generate-site
make serve  # Binds port 8000

Contributors

  • From 2014 to 2018: V1 - Initial version of the project hosted on the OWASP WIKI.
  • From 2019: V2 - Hosted on GitHub.

Special thanks

A special thank you to the following people for their help provided during the migration:

  • Dominique Righetto: For his special leadership and guidance.
  • Elie Saad: For valuable help in updating the OWASP Wiki links for all the migrated cheat sheets and for years of leadership and other project support.
  • Jakub Maćkowski: For valuable help in updating the OWASP Wiki links for all the migrated cheat sheets.

Open Web Application Security Project and OWASP are registered trademarks of the OWASP Foundation, Inc.

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].