CRSprober

CRSprober विवरण यह उपकरण रिमोट से किसी ModSecurity WAF द्वारा उपयोग किए जा रहे OWASP Core Rule Set CRS के संस्करण का पता लगाता है। साथ ही यह CRS के कॉन्फ़िगर किए गए पैरानोइया स्तर PL की पहचान करता है, जो स्थानीय पहुँच की आवश्यकता के बिना WAF की सुरक्षा स्थिति के बारे में जानकारी प्रदान करता है।...

OWASP-MCP-Governance-and-Risk-Project

Questo repository non contiene un README...

Security-Champions

Guida OWASP Security Champions Utilizzo di MKDocs per ospitare i nostri contenuti accanto alla pagina del progetto OWASP su https://securitychampions.owasp.org/. Ispirato da https://github.com/OWASP/API-Security e https://github.com/OWASP/Top10/tree/master/2021. Creare una copia locale su Windows...

OSIB

OWASP Open Security Information Base OSIB Pagina del progetto: https://owasp.org/www-project-open-security-information-base Repository del software: https://github.com/OWASP/OSIB Strumenti forniti: mkdocsmacroosib.py modulo Python installabile manualmente osibmacro.py macro da copiare che importa...

ESAPI__esapi-java-legacy_CVE-2022-24891_2-2-3-1

API di sicurezza aziendale per Java Legacy OWASP® ESAPI l'API di sicurezza aziendale OWASP è una libreria gratuita e open source di controlli di sicurezza per applicazioni web che semplifica la scrittura di applicazioni a basso rischio da parte dei programmatori. La libreria ESAPI per Java è...

domain-protect

OWASP Domain Protect - moved OWASP Domain Protect has moved to terraform-aws-domain-protect OWASP Domain Protect is now available as a Terraform Module See OWASP Domain Protect documentation including options for migration...

zap-hud

ZAP Heads Up Display The HUD is no longer under active development Unfortunately the HUD is no longer under active development due to the fact no one is focusing on it. The HUD is a unique and innovative interface that we know some people love. But it also needs a non trivial amount of maintenanc...

dvna

Damn Vulnerable NodeJS Application DVNA Damn Vulnerable NodeJS Application DVNA is a simple NodeJS application to demonstrate OWASP Top 10 Vulnerabilities and guide on fixing and avoiding these vulnerabilities. The fixes branch will contain fixes for the vulnerabilities. Fixes for vulnerabilities...

owasp-threat-dragon-desktop

OWASP Threat Dragon Threat Dragon is a free, open-source, cross-platform threat modeling application including system diagramming and a rule engine to auto-generate threats/mitigations. It is an OWASP Incubator Project. The focus of the project is on great UX, a powerful rule engine and integrati...

domain-protect

domain-protect Domain Protect è ora un progetto OWASP spostato su: github.com/domain-protect/domain-protect...

golismero

What's GoLismero? GoLismero is an open source framework for security testing. It's currently geared towards web security, but it can easily be expanded to other kinds of scans. The most interesting features of the framework are: Real platform independence. Tested on Windows, Linux, BSD and OS X. ...

web-threat-mitigation

web-threat-mitigation Laboratorio pratico per rilevare e mitigare le minacce alle applicazioni web utilizzando OWASP ZAP, Burp Suite e ModSecurity WAF con OWASP CRS. Caso di studio: Spring4Shell CVE-2022-22965. Setup locale basato su Docker. Laboratorio di Mitigazione delle Minacce Web – OWASP ZA...

zip-shotgun

ZIP Shotgun Utility script to test zip file upload functionality and possible extraction of zip files for vulnerabilities aka Zip Slip. Idea for this script comes from this post on Silent Signal Techblog - Compressed File Upload And Command Execution and from OWASP - Test Upload of Malicious File...

SecureAI-Scan

SecureAI-Scan...

maswe

OWASP Mobile Application Security Weakness Enumeration MASWE Die OWASP Mobile Application Security Weakness Enumeration MASWE ist eine Liste häufiger Sicherheits- und Datenschutzschwächen in mobilen Anwendungen. Sie dient als Referenz für Entwickler, Sicherheitsforscher und Sicherheitsexperten. S...

TCASVS

Standard OWASP di verifica della sicurezza delle applicazioni Thick Client TCASVS Introduzione Lo Standard OWASP di verifica della sicurezza delle applicazioni Thick Client TCASVS fornisce un insieme completo di requisiti di sicurezza per progettare, sviluppare e testare applicazioni thick client...

DVAP

DVAP - Piattaforma AI Dannatamente Vulnerabile Addestra. Attacca. Difendi. Sistemi AI. Una piattaforma open-source per la formazione sulla sicurezza AI, red/blue teaming, CTF, benchmark e ricerca. Funziona al 100% in locale. Nessun cloud, nessuna API a pagamento, nessun dato lascia il tuo compute...

cwe-sdk-javascript

cwe-sdk Um SDK Node.js de Common Weakness Enumeration CWE em conformidade com MITRE / CAPEC...

OWASP-WSTG-Rag

OWASP WSTG RAG Un sistema Retrieval-Augmented Generation RAG che indicizza la OWASP Web Security Testing Guide WSTG in un database vettoriale, fornendo accesso immediato alle metodologie di test di sicurezza tramite API REST e MCP Model Context Protocol per l'integrazione con Claude Code...

mas-website

OWASP Mobile Application Security Projekt Webseite Dieses Repository enthält den Quellcode und die Konfiguration für die OWASP Mobile Application Security Projekt Webseite mas.owasp.org. Diese Website aggregiert, organisiert und präsentiert Dokumentation aus den wichtigsten MAS-Ressourcen mit...