849420 matches found
SecurityRAT
OWASP Security RAT Requirement Automation Tool is a tool helping you manage security requirements in your agile development projects. The typical use case is: specify parameters of the software artifact you're developing based on this information, list of common security requirements is generated...
ARTLAS
ARTLAS Apache Real Time Logs Analyzer System Real time Apache log analyzer, based on top 10 OWASP vulnerabilities, identifies attempts of exploration in your web application, and notify you or your incident team on Telegram, Zabbix and Syslog/SIEM. ARTLAS uses the regular expression from the...
IoTGoat
OFFICIAL REPO HAS BEEN MOVED TOhttps://github.com/OWASP/IoTGoat Description The IoTGoat Project is a deliberately insecure firmware based on OpenWrt and maintained by OWASP to educate users how to test for the most common vulnerabilities found in IoT devices. The vulnerability challenges are base...
noir
Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface. Documentation • Installation • Usage • Github Action • Contributing • Changelog Noir is a SAST tool that reads source code and extracts the endpoints an application exposes — paths, methods, parameters, headers, cookies...
cve-lite-cli
Most tools tell you what's wrong. CVE Lite CLI tells you what to run. CVE Lite CLI 🏆 Officially recognized as anOWASP Lab Project Vulnerability scanning that starts in your terminal and fits cleanly into CI. Scan your lockfile, get copy-and-run fix commands, and ship clean code. Scan. Understand...
pygoat
PyGoat intentionally vuln web Application Security in django. our roadmap build intentionally vuln web Application in django. The Vulnerability can based on OWASP top ten Table of Contents pygoat Installation Docker Compose recommended From Sources Windows Notes Installation Video Uninstallation...
payloads
payloads Git All the Payloads! A collection of web attack payloads. Pull requests are welcome! Usage run ./get.sh to download external payloads and unzip any payload files that are compressed. Payload Credits fuzzdb - https://github.com/fuzzdb-project/fuzzdb SecLists -...
Software-Component-Verification-Standard
OWASP Software Component Verification Standard The Software Component Verification Standard SCVS is a community-driven effort to establish a framework for identifying activities, controls, and best practices, which can help in identifying and reducing risk in a software supply chain. Managing ris...
whitesource__curekit_CVE-2022-23082_1-1-3
CureKit - WhiteSource Cure Encoding Package CureKit is a security library mostly used by the WhiteSource Cure self-fixing product. WhiteSource Cure is an innovative solution that automatically generates remediation suggestions for vulnerabilities identified by detection tools in proprietary code...
Top10
Top10 Official OWASP Top 10 Document Repository OWASP Top 10 2025 - RELEASED We have released the OWASP Top 10:2025 Final: OWASP Top10:2025 Please log any feedback, comments, or log issues here. OWASP Top 10 2021 - SUPERSEDED OWASP Top10:2021 OWASP Top 10 2017 - HISTORIC OWASP Top 10:2017 PPTX...
owasp-threat-dragon-desktop
OWASP Threat Dragon Threat Dragon is a free, open-source, cross-platform threat modeling application including system diagramming and a rule engine to auto-generate threats/mitigations. It is an OWASP Incubator Project. The focus of the project is on great UX, a powerful rule engine and integrati...
awscanner
awscanner About Finds internet-exposed resources in an AWS account. Results of the scan will be put in the results folder https://owasp.org/www-project-awscanner/ Installation git clone https://github.com/OWASP/awscanner.git pip install aws-shell cd awscanner pip install -r requirements.txt Usage...
API-Security
OWASP API Security Top 10 This project is designed to address the ever-increasing number of organizations that are deploying potentially sensitive APIs as part of their software offerings. These APIs are used for internal tasks and to interface with third parties. Unfortunately, many APIs do not...
CyberStrike
English | 简体中文 | 繁體中文 | 한국어 | Deutsch | Español | Français | Italiano | Dansk | 日本語 | Polski | Русский | Bosanski | العربية | Norsk | Português Brasil | ไทย | Türkçe | Українська | বাংলা | Ελληνικά | Tiếng Việt | हिन्दी The first open-source AI agent built for offensive security. Automated...
zap-hud
ZAP Heads Up Display The HUD is no longer under active development Unfortunately the HUD is no longer under active development due to the fact no one is focusing on it. The HUD is a unique and innovative interface that we know some people love. But it also needs a non trivial amount of maintenanc...
multi-juicer
Running CTFs and Security Trainings with OWASP Juice Shop is usually quite tricky, Juice Shop just isn't intended to be used by multiple users at a time. Instructing everybody how to start Juice Shop on their own machine works ok, but takes away too much valuable time. MultiJuicer gives you the...
APTS
What is OWASP APTS? A governance standard for autonomous penetration testing platforms. It defines what these systems must do to operate safely, transparently, and within defined boundaries, whether they are delivered by vendors, operated as a service, or built in-house by enterprise security tea...
zaproxy
The Zed Attack Proxy ZAP by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...
APKHunt
APKHunt | OWASP MASVS Static Analyzer APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential...