Awesome Open Source

Programming Languages

Search results for owasp

612 search results found

Zap Api Dotnet ⭐ 32

OWASP ZAP Dot NET API

Bdd Mobile Security Automation Framework ⭐ 31

Mobile Security testing Framework

Untrusted.py ⭐ 31

Safer Python with types for untrusted input

Redteamtoolkit ⭐ 31

The WASM Based Security Toolkit for the Web First Paradigm

Owasp Testing Guide Checklist ⭐ 30

OWASP based Web Application Security Testing Checklist

Waf Brain ⭐ 30

Machine Learning WAF Based

Stride Vs Asvs ⭐ 30

🔦 STRIDE vs ASVS equivalence table

Container Security Verification Standard ⭐ 30

Container Security Verification Standard

Express Security ⭐ 29

nodejs + express security and performance boilerplate.

Owaspbugbounty ⭐ 29

This is a container of web applications that work with OWASP Bug Bounty for Projects

Threat Dragon Core ⭐ 29

OWASP Threat Dragon core files

OWASP Skanda - SSRF Exploitation Framework

The Adaptive Security Testing Methodology (ASTM) provides context-adjusted testing methodologies based on factors such as time available to test, platform, technology stack, versions, plugins, modules, and other variables.

Spring Jackson Owasp ⭐ 29

Owtf Docker ⭐ 28

Docker repository for OWTF (64-bit Kali)

Deserialize ⭐ 28

Pentester's Tools Parser (PTP) provides an unified way to retrieve the information from all (final goal) automated pentesting tools and assign an automated ranking for each finding.

Secure Coding Practices Quick Reference Guide ⭐ 28

The Secure Coding Practices Quick-reference Guide from OWASP

Secure Pipeline Java Demo ⭐ 28

Cwe Sdk Javascript ⭐ 28

A Common Weakness Enumeration (CWE) Node.js SDK compliant with MITRE / CAPEC

Docker Zap ⭐ 28

Owasp Zap Jwt Addon ⭐ 27

OWASP ZAP addon for finding vulnerabilities in JWT Implementations

Devsecops Reference Architectures ⭐ 27

A collection of DevSecOps reference architectures

Burpsuite101 ⭐ 27

Set up your own BurpSuite

OWASP Ontology-driven Threat Modelling framework

OWASP ASVS Assessment Tool

Open Security Summit 2018

Owasp Proxy ⭐ 26

Webappsec Nutshell ⭐ 26

An ultra-compact intro (or refresher) to Web Application Security.

Owasp Zap Vsts Extension ⭐ 26

Tools to run OWASP ZAP container in VSTS build and release

Waflyctl ⭐ 25

Dir Xcan ⭐ 25

Python version of OWASP's DirBuster Application.

The Open Security Summit 2020 is focused on the collaboration between, Developers and Application Security

Containers Security Project ⭐ 24

A place for documenting threats and mitigations related to containers orchestrators (Kubernetes, Swarm etc)

Mod_security ⭐ 24

Cookbook for mod_security deployment

Infosecbookmarks ⭐ 24

Waf_testbed ⭐ 24

Chef Cookbook which provisions apache+mod_security+owasp-crs

Skf Chatbot ⭐ 24

This is a security Knowledge Framework chatbot which will answer your queries related to web vulnerabilities.

Owasp 1 Liner ⭐ 24

A deliberately vulnerable Java- and JavaScript-based chat application intended for demos and training in application security.

Illustration_http ⭐ 24

一本 HTTP 的漫画：《图解 HTTP》

Cyclonedx Conan ⭐ 23

Creates CycloneDX Software Bill of Materials (SBOM) documents for C/C++ projects using Conan

Security Requirements Generator ⭐ 23

A small tool to help developers understand a huge set of security requirements from appsec teams

Lsws Docker Env ⭐ 23

LiteSpeed Enterprise Docker Environment

Owasp Zap Vsts Task ⭐ 23

Visual Studio Team Services build/release task for running OWASP ZAP automated security tests

Fsecurity ⭐ 23

Security testing library written in F# to make writing security tests more fun.

Owasp Testing Guide V4 Gitbook ⭐ 22

Just A GITBOOK Ver of WIKI, translating to CHINESE

Owasp Mobile Top 10 2016 ⭐ 22

OWASP Mobile Top 10 2016 日本語訳

Open Security Summit 2019

Zap Mini Workshop ⭐ 22

Interactive IPython Notebook to demonstrate OWASP ZAP's API and Scripting Functions - OWASP ZAP 2.8.0

Webgoat.net ⭐ 22

WebGoat.NETCore - port of original WebGoat.NET to .NET Core

Pentesting Checklist ⭐ 22

Penetration Testing Checklist

Cyclonedx Webpack Plugin ⭐ 22

Create CycloneDX Software Bill of Materials (SBOM) from webpack bundles at compile time.

Blt Flutter ⭐ 21

The official OWASP BLT App repository/ Heist 'em bugs!

Tutorials ⭐ 21

Additional Resources For Securing The Stack Tutorials

Audit Dependency-Track findings and policy violations via policy as code

Document Upload Protection ⭐ 21

POC in order to protect an document upload application feature against "malicious" document submission.

Useful Security Links ⭐ 20

A page of useful links for those starting security testing

Purecaptcha ⭐ 20

OWASp PureCaptcha project

Clearlead ⭐ 20

The name is clear, the concept is simple. Run this to assess the external footprint of a given website. Hopefully, there will be a clear lead to follow.

Owasp Zap Glue Ci Images ⭐ 20

Ready to use images of Zap and Glue, especially for CI integration.

Mobile Security Review ⭐ 20

Security review guidelines for mobile projects

Gh Node Module Generatebom ⭐ 20

GitHub action to generate a CycloneDX SBOM for Node.js

Docker_nginx_modsecurity ⭐ 20

Dockerfile for Nginx with Modsecurity v3 and Brotli compression

A podcast listening progressive web app with all-around automated quality assurance

Security Resources ⭐ 19

A list of stuff to learn more about security!

Transparency Exchange Api ⭐ 19

A standard API specification for exchanging CycloneDX BOMs

Owasp Asvs Ja ⭐ 19

unofficial Japanese translation of OWASP Application Security Verification Standard.

Owasp Cstg ⭐ 18

Owasp Zap Openshift ⭐ 18

A Docker build for OWASP Zed Attack Proxy to be used in CI/CD pipelines

Awesome Hacking Practice ⭐ 18

A curated list of websites and apps to help you practice hacking

Dotnet Security Unit Tests ⭐ 18

A web application that contains several unit tests for the purpose of .NET security

The repo contains all the slide deck that was used during my presentation at various webinars, conferences, and meetups.

Owasp Risk Rating Calculator ⭐ 17

A Java library for programmatically calculating OWASP Risk Rating scores

Injection Attacks Nosql Talk ⭐ 17

Slides of the talk on Injection attacks in apps with NoSQL Backends, given at null OWASP Bangalore monthly meet on 27th April 2019

Cyclonedx Cocoapods ⭐ 17

Creates CycloneDX Software Bill-of-Materials (SBOM) from Objective-C and Swift projects that use CocoaPods.

Dependency Check ⭐ 17

An example on how to use the OWASP Dependency-Check maven plugin (including Jenkins)

Next Security ⭐ 17

🛡 Security plugin for Next.js based on OWASP and Helmet

Zaproxy Automation ⭐ 17

This is a collection of ZAProxy Automation Tools and scripts to automate security tests of WEB Applications and WEB Sites

Owasp Crs Regressions ⭐ 16

Regression tests for OWASP CRS v3

POC about usage of JSON Web Tokens (JWT) in a secure way.

Presentations ⭐ 16

My presentations from different conferences

Appsec_awareness_training ⭐ 16

Application Security Awareness Training

Awesome Infosecnz ⭐ 16

Owasp_droid10 ⭐ 16

OWASP Droid10 is an opensource handheld system based (android) web application pen testing tool. It can scan for web application vulnerability from any android device.Some features can be customized according to testers need.

Php Owasp Zap V2 ⭐ 16

PHP client API for OWASP ZAP 2

Cyclonedx Web Tool ⭐ 16

A web based tool for working with CycloneDX BOMs

Www Project Cheat Sheets ⭐ 16

OWASP Foundation Web Respository

Www Project Vulnerable Web Applications Directory ⭐ 15

The OWASP Vulnerable Web Applications Directory (VWAD) Project - OWASP Web Site

Secure-D Web Application Security Test Checklist summarizes well-known weaknesses, vulnerabilities and best practices into review topics with short description and recommendation. Its objective is to aid penetration tester to review the web application thoroughly.

Customactivescanforzap ⭐ 15

a ZAPROXY Addon ActiveScan for detecting SQL injection with more better way.

Juice Shop Solver ⭐ 15

Automated solving script for the OWASP Juice Shop

Owasp Aasvs ⭐ 15

OWASP Annotated Application Verfication Standard

bWAPP latest modified for PHP7

Automacrobuilderforzap ⭐ 15

A ZAPROXY Add-on that allows testing of web application vulnerabilities by recording complex multi-step sequences. You can test applications that need to access pages in a specific order, such as shopping carts or registration of member information.

Secure Password Storage

Owasp Threat Dragon Gitlab ⭐ 14

OWASP Threat Dragon with Gitlab Integration

Zap Swag ⭐ 14

Artwork for all official ZAP swag - posters, stickers, t-shirts etc

Http Request Translator ⭐ 14

HTTP Request Translator (hrt) translates raw HTTP requests to different scripts (bash, python, etc.)

Pixi Crs ⭐ 14

CI Pipeline with Pixi, the WAF OWASP Core Rule Set and TestCafe tests.

301-400 of 612 search results

Privacy | About | Terms | Follow Us On Twitter

Copyright 2018-2024 Awesome Open Source. All rights reserved.