WhatwebNext generation web scanner
Stars: ✭ 3,503 (+2946.09%)
juice-shopOWASP Juice Shop: Probably the most modern and sophisticated insecure web application
Stars: ✭ 7,533 (+6450.43%)
WstgThe Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
Stars: ✭ 3,873 (+3267.83%)
Juice ShopOWASP Juice Shop: Probably the most modern and sophisticated insecure web application
Stars: ✭ 6,270 (+5352.17%)
CheatsheetseriesThe OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
Stars: ✭ 19,302 (+16684.35%)
www-project-zapOWASP Zed Attack Proxy project landing page.
Stars: ✭ 52 (-54.78%)
JWTweakDetects the algorithm of input JWT Token and provide options to generate the new JWT token based on the user selected algorithm.
Stars: ✭ 85 (-26.09%)
juice-shop-ctfCapture-the-Flag (CTF) environment setup tools for OWASP Juice Shop supporting CTFd, FBCTF and RootTheBox
Stars: ✭ 287 (+149.57%)
Sbt Dependency CheckSBT Plugin for OWASP DependencyCheck. Monitor your dependencies and report if there are any publicly known vulnerabilities (e.g. CVEs). 🌈
Stars: ✭ 187 (+62.61%)
Zap HudThe OWASP ZAP Heads Up Display (HUD)
Stars: ✭ 201 (+74.78%)
tutorialsAdditional Resources For Securing The Stack Tutorials
Stars: ✭ 36 (-68.7%)
Juice Shop CtfCapture-the-Flag (CTF) environment setup tools for OWASP Juice Shop
Stars: ✭ 238 (+106.96%)
Www CommunityOWASP Community Pages are a place where OWASP can accept community contributions for security-related content.
Stars: ✭ 409 (+255.65%)
vapivAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios through Exercises.
Stars: ✭ 674 (+486.09%)
nerdbugFull Nuclei automation script with logic explanation.
Stars: ✭ 153 (+33.04%)
Web MethodologyMethodology for high-quality web application security testing - https://github.com/tprynn/web-methodology/wiki
Stars: ✭ 142 (+23.48%)
Django DefectdojoDefectDojo is an open-source application vulnerability correlation and security orchestration tool.
Stars: ✭ 1,926 (+1574.78%)
dependency-check-pluginJenkins plugin for OWASP Dependency-Check. Inspects project components for known vulnerabilities (e.g. CVEs).
Stars: ✭ 107 (-6.96%)
sqlinjection-training-appA simple PHP application to learn SQL Injection detection and exploitation techniques.
Stars: ✭ 56 (-51.3%)
Application Security Engineer Interview QuestionsSome of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exhaustive list but i felt these questions were important to be asked and some were challenging to answer
Stars: ✭ 267 (+132.17%)
BulwarkAn organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports.
Stars: ✭ 113 (-1.74%)
Awesome AppsecA curated list of resources for learning about application security
Stars: ✭ 4,761 (+4040%)
nodejssecurityDocumentation for Essential Node.js Security
Stars: ✭ 64 (-44.35%)
Owasp VwadThe OWASP Vulnerable Web Applications Directory project (VWAD) is a comprehensive and well maintained registry of all known vulnerable web applications currently available.
Stars: ✭ 487 (+323.48%)
zap-sonar-pluginIntegrates OWASP Zed Attack Proxy reports into SonarQube
Stars: ✭ 66 (-42.61%)
NettackerAutomated Penetration Testing Framework
Stars: ✭ 982 (+753.91%)
Dependency TrackDependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
Stars: ✭ 718 (+524.35%)
ZaproxyThe OWASP ZAP core project
Stars: ✭ 9,078 (+7793.91%)
Automation ArsenalCurated list of popular Java and Kotlin frameworks, libraries and tools related to software testing, quality assurance and adjacent processes automation.
Stars: ✭ 105 (-8.7%)
AutomategoImplementation on Go projects book "Automate the Boring Stuff with Python: Practical Programming for Total Beginners"
Stars: ✭ 109 (-5.22%)
RodA Devtools driver for web automation and scraping
Stars: ✭ 1,392 (+1110.43%)
Cloudflare DdnsScript for dynamically updating a CloudFlare DNS record. (Deprecated)
Stars: ✭ 112 (-2.61%)
DekstereconWeb Application recon automation
Stars: ✭ 109 (-5.22%)
Sshkit.exAn Elixir toolkit for performing tasks on one or more servers, built on top of Erlang’s SSH application.
Stars: ✭ 108 (-6.09%)
FacebookautolikeprofessionalAuto Like reactions and unlike Facebook Status, Comments, Photos, group posts, page posts, change facebook theme and skin colors, auto tag members in group post.. Auto Comment and Auto Reply to all Comments... Facebook Auto Like Unlimited 2019 is 100% safe to use...
Stars: ✭ 101 (-12.17%)
ScriptsdumpThe biggest dump of scripts ever!
Stars: ✭ 114 (-0.87%)
Rhcsa8envThis is a RHCSA8 study environment built with Vagrant/Ansible
Stars: ✭ 108 (-6.09%)
Wdio Screenshot A WebdriverIO plugin. Additional commands for taking screenshots with WebdriverIO.
Stars: ✭ 101 (-12.17%)
Mini Graph CardMinimalistic graph card for Home Assistant Lovelace UI
Stars: ✭ 1,370 (+1091.3%)
CliGet a programmable email address. Automate what happens when you receive emails. It's like Zapier for devs who hate emails.
Stars: ✭ 105 (-8.7%)
Betaninbeets based mitm of your torrent client and music player
Stars: ✭ 101 (-12.17%)
AetAET - a system that detects visual changes on web sites and performs basic page health checks
Stars: ✭ 100 (-13.04%)
Auto.jsA UiAutomator on android, does not need root access(安卓平台上的JavaScript自动化工具)
Stars: ✭ 10,882 (+9362.61%)
SillyniumAutomate the creation of Python Selenium Scripts by drawing coloured boxes on webpage elements
Stars: ✭ 100 (-13.04%)
AwxAWX Project
Stars: ✭ 10,469 (+9003.48%)