Awesome Open Source

Programming Languages

Search results for owasp

612 search results found

Libinjection Go ⭐ 14

libinjection is a Golang port of the libinjection(https://github.com/client9/libinjecti

Spring Rest ⭐ 13

Cyclonedx Linux Generator ⭐ 13

Lockheed Martin developed utility to generate CycloneDX SBOMs for Linux distributions

Dependencycheck Central Mysql Docker ⭐ 13

Self-updating OWASP DependencyCheck Database Server 📖

Kubernetes Security Testing Guide

PHP MVC boilerplate with user authentication, basic security and MySQL CRUD operations.

Root Detection Bypass ⭐ 13

A tool capable of bypassing easy root detection mechanisms by patching applications automatically (without frida).

Owasp Books ⭐ 13

git for the owasp books project; setting up processes capabilities for publishing OWASP books

Kyberoppi ⭐ 13

Verkkosovelluksen tietoturvan varmistaminen. Tukimateriaali ohjelmistoalan ammattilaisille.

Metaclassauthenticationguardbundle ⭐ 13

Authentication Guard for Symfony 2, aims to protect authentication against brute force and dictionary attacks

Owasp Malicious Javascript ⭐ 13

Materials for OWASP presentation on malicious JavaScript

Django Pymodsecurity ⭐ 13

ModSecurity Django middleware

Kotlin Scp ⭐ 13

Kotlin Secure Coding Practices is a guide written for anyone using Kotlin for mobile development.

Wp Plugins Scanner ⭐ 13

Wordpress Plugins Scanner it's a semi-automatic white box pentesting/crawler app for WP plugins using RIPS from OWASP.

A archive with my pentest / bug bounty study notes

Pytest Zap ⭐ 12

OWASP Zed Attack Proxy plugin for py.test

Www Project Mobile Application Security Design Guide ⭐ 12

Mobile Application Security Design Guide

Zap Api Rust ⭐ 12

Cloudsoc ⭐ 12

Push-button Security Operations Center using Kubernetes

Penetration_testing_resources ⭐ 12

This repo contains resources to help learn and understand penetration testing

OWASP OFFAT tests your API automatically for common API vulnerabilities. Project is still Work In Progress. PRs are appreciated.

Owasp_zap ⭐ 12

access zap proxy api using ruby

Cyclonedx Javascript Library ⭐ 12

Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser) written in TypeScript.

Hego Wiki ⭐ 12

HEGO Hunting Wiki | Offensive Cybersecurity Checklist

Docker Nginx Modsecurity ⭐ 12

nginx with ModSecurity (and certbot)

Webgoat.mvc ⭐ 12

OWASP Top 10 Implemented in ASP.NET MVC

Zaproxy Test ⭐ 12

OWASP ZAP test code

Owasp Masvs ⭐ 11

OWASP Mobile Application Security Verification Standard (MASVS) 日本語訳

Zaproxy Plugin ⭐ 11

Not distributed anymore but allow the existing users of the plugin to use the latest version. Please migrate to:

Fluenttalksecurityinfo ⭐ 11

Information and links for attendees

Cyclonedx Ruby Gem ⭐ 11

Creates CycloneDX Software Bill of Materials (SBOM) from Ruby projects

Owasp_mobilemalwaresession ⭐ 11

Www Project Embedded Application Security ⭐ 11

OWASP Embedded Application Security Project

Awesome Security Vul Llm ⭐ 11

本项目通过大模型联动爬虫，检索Github上所有存有有价值漏洞信息与漏洞POC或规则信息的项目，并自

Poc Csrf ⭐ 11

POC in order to materialize CSRF prevention concepts described in the following OWASP CSRF cheatsheet

Xamarin Cert Pinning ⭐ 11

Xamarin sample application that demonstrates certificate public key pinning.

Awesomeqa ⭐ 11

A collection of awesome software, libraries, documents, books, resources and cool stuff about Software Quality.

Docker Tutorial ⭐ 11

🐳 Getting Started with Docker

Gh Python Generate Sbom ⭐ 11

GitHub action to generate a CycloneDX SBOM for Python

Cyberspace ⭐ 10

View https://linktr.ee/martian1337 for the Gitbook!!

Oshp Stats ⭐ 10

Stats about HTTP response security headers usage mentioned by the OSHP.

Www Event 2020 Latam At Home ⭐ 10

Intro To Chrome Exploitation ⭐ 10

Class materials from OWASP Portland 2019

Owasp Zsc Api ⭐ 10

OWASP ZSC API http://api.z3r0d4y.com/v2

Owaspctf ⭐ 10

OWASP Ukraine 2019 CTF

Owasp Orb ⭐ 10

CircleCI Orb for running OWASP depenency check plugin for Maven and Gradle builds

Awesome Sdlc ⭐ 10

Collection of resources on building Secure Development Lifecycle

Sonar Zap ⭐ 10

Feed SonarQube with OWASP Zed Attack Proxy (ZAP) reports

Resources ⭐ 10

Resources I've found helpful for learning computing security.

Terraform Aws Waf Global ⭐ 10

A CloudFront WAF as a Terraform module covering OWASP top 10

Meteor Client Sessions ⭐ 10

MOSTLY DEAD, SEE README --- A smart package for tracking clients across requests

Owasp Zap Historic ⭐ 10

Store ZAP reports historically and compare current ZAP results against the most recent for changes in alerts.

Ansible Module Owasp Zap ⭐ 10

Ansible module for OWASP ZAP using Python API to scan web targets for security issues

Document To Chinese ⭐ 10

translate OWASP project into Chinese,and some document

Cyclonedx Dotnet Library ⭐ 10

.NET library to consume and produce CycloneDX Software Bill of Materials (SBOM)

Good Old Files ⭐ 9

An OWASP ZAP extension that enhances the detection of obsolete and hidden files

Kalilinuxtools ⭐ 9

For Education Purpose Only (Self Learning)

Vulnwebcollection ⭐ 9

Web attack vectors collection

Gh Gomod Generate Sbom ⭐ 9

GitHub action to generate a CycloneDX SBOM for Go modules

Conferences ⭐ 9

Repository where I keep my conferences / events related resources

Every Hacker's Go to Fuzzing List. Introducing the Ultimate Fuzzing Directory: Your Go-To Resource for Penetration Testers and Bug Bounty Hunters! Unlock the power of comprehensive fuzzing with our meticulously curated Fuzzing Directory, a one-stop solution designed to streamline your penetration testing and bug bounty hunting endeavors.

Owasp Threat Dragon Core ⭐ 9

OWASP Threat Dragon core files

A vulnerable application for teaching the basics of web application security

Enyo is a lightweight multistage partition-based encryption algorithm. Enyo cipher demonstrates good resistance to a brute-force attack. It is well suited for small-scale applications where the computational power is a bottleneck.

Mutillidae Dockerhub ⭐ 9

OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security enthusiasts.

Acquirer.sh ⭐ 9

acquirer.sh A Automated recon script made by @AlbonyCal

Quick Start Guide ⭐ 9

Repo for the OWASP Quick Start Guide

OWASP WAP - Web Application Protection Project

Zap Lambda ⭐ 9

ZAP running in a lambda?!

Www Project Mobile Security ⭐ 9

OWASP Foundation Web Respository

Quickbundle 5.0_javasec ⭐ 9

A set of safe archetype with "Build Security In"

OWASP ZAP add-on to help find reflected parameter vulnerabilities

Containerpwn ⭐ 8

Container security resources

Appsectoolbox Tools ⭐ 8

Repo to hold the markdown-ified metadata on AppSec tools that are automation-friendly

Seguranca De Redes ⭐ 8

Aulas, exercícios e resumos da matéria: segurança da informação.

Free Online Tools

Zap Friendly Report ⭐ 8

A friendly ZAP Report converter from XML to HTML and Material Design

Securitykit ⭐ 8

Security Kit is a lightweight framework that helps to achieve a security layer

Www Project Cyber Controls Matrix ⭐ 8

OWASP Cyber Controls Matrix (OCCM)

a collection of bash script and python to automate ZAP Security Tests

Insider Action ⭐ 8

:octocat: Official Github Action for Insider

Ciphersurfer ⭐ 8

Pentest4vaadin ⭐ 8

Spider and analyze vaadin applications with OWASP ZAP - the app mediates between the two.

Insight_securepenbox ⭐ 8

Antisamy Ruby ⭐ 8

Anti-Samy implmentation for Ruby. This package is a port of the existing anti-samy project found on the OWASP site.

Webgoat Vm ⭐ 8

A Virtual Machine setup for WebGoat

Owasp_zap ⭐ 8

ruby owasp proxy API upstream on

Node Shield ⭐ 8

Protects against common Node.js vulnerabilities in MEAN stack (MongoDB, Node.js).

Dvwa Writeup ⭐ 8

This repository contains writeups for Damn Vulnerable Web Application (DVWA).

Buzzboard ⭐ 8

Model application with user activity ML filter for OWASP Night Tokyo 2016

Key Guard ⭐ 8

A python tool that checks to find exposed authentication keys in a project and throws a warning. This prevents the sharing of sensitive data and enforces the use of best paractices like saving authentication keys and passwords to .env files.

Libcoraza ⭐ 8

OWASP Coraza C connector

Ror And Friends Security Guide ⭐ 7

Owasp Ruby on Rails and Friends Security Guide

Docker Nginx Modsecurity V3 Waf ⭐ 7

Web application firewall (WAF) via SpiderLabs/ModSecurity v3 shipped with OWASP Core Rule Set 3.0.2

Zap Gradle Plugin ⭐ 7

Standalone gradle plugin to aid in integrating OWASP ZAP (security analysis tool)

Mobile Pentest Toolkit ⭐ 7

Boilerplate Templates ⭐ 7

Provides boilerplate vulnerability explanations and templates which can easily be used in real-world reports

401-500 of 612 search results

Privacy | About | Terms | Follow Us On Twitter

Copyright 2018-2024 Awesome Open Source. All rights reserved.