79 open source projects by OWASP

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

IoTGoat is a deliberately insecure firmware created to educate software developers and security professionals with testing commonly found vulnerabilities in IoT devices.

OWASP iGoat - A Learning Tool for iOS App Pentesting and Security by Swaroop Yermalkar

OWASP Serverless Top 10

OWASP IoT Security Verification Standard (ISVS)

OWASP Single Sign-On allows a secure-by-default self-hosted SSO experience, including phishing-proof two-factor authentication, using state-of-the-art security mechanisms.

git for the owasp books project; setting up processes capabilities for publishing OWASP books

This is a container of web applications that work with OWASP Bug Bounty for Projects

A documentation and tracking project with the goal of making package management systems more secure.

The OWASP Top 5 Machine Learning Risks[edit | edit source] The idea is to build the required resources which help software security community to understand the emerging technology of machine learning and how it is related to security, warn them about the risk associated with using ML, and discuss the defending techniques. Description[edit | edi…

OWASp PureCaptcha project

Simple Software Vulnerability Language (SSVL)

A Common Weakness Enumeration (CWE) Node.js SDK compliant with MITRE / CAPEC

OWASP Learning Gateway Project

Software Component Verification Standard (SCVS)

OWASP Foundation Web Respository

The OWASP Vulnerable Web Applications Directory (VWAD) Project - OWASP Web Site

Encoder, Decoder, Converter, Calculator, TU WAS DU WILLST .. for various codings used in the wild wide web

The aim of this project is to protect Java applications against CSRF attacks with the use of Synchronizer Tokens

The OWASP Guide

The Web Security Testing Guide (WSTG) Project produces the premier cybersecurity testing resource for web application developers and security professionals.

Declarative syntax for defining sets of URLs. No need for error-prone regexs.

OWASP Zed Attack Proxy project landing page.

OWASP Raider: a novel framework for manipulating the HTTP processes of persistent sessions

completely ridiculous API (crAPI)

Owasp Proxy

OWASP Code Review Guide Web Repository

Repository for OWASP Code Review document

A command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration.