awesome-appsec-interview

Awesome AppSec Interview A curated list of resources, practice questions, and study materials to help you prepare for Application Security Engineer interviews, organized by interview type. Contents Interview Overview Secure Code Review Threat Modeling Coding & Scripting Scenario-Based Interviews...

threagile

Threagile Kit de Modelado de Amenazas Ágil Threagile consulte threagile.io para más detalles es un kit de herramientas de código abierto para el modelado de amenazas ágil: Permite modelar una arquitectura con sus activos de manera ágil como un archivo YAML directamente dentro del IDE. Al ejecutar...

threatcl

threatcl Modelado de Amenazas con HCL ¿Qué pasó con hcltm? hcltm ha sido renombrado a threatcl. ¡Bienvenido! Resumen !TIP ¿Quieres leer la nueva documentación? Dirígete a threatcl.dev Hay muchas formas diferentes de documentar un modelo de amenazas. Desde un archivo de texto simple, hasta...

pytm

pytm: A Pythonic framework for threat modeling Introduction Traditional threat modeling too often comes late to the party, or sometimes not at all. In addition, creating manual data flows and reports can be extremely time-consuming. The goal of pytm is to shift threat modeling to the left, making...

ws4-secure-design-agentic-systems

CoSAI Workstream 4: Secure Design Patterns for Agentic Systems This repository is for the work of the CoSAI Workstream 4, Secure Design Patterns for Agentic Systems. CoSAI is an OASIS Open Project and an open ecosystem of AI and security experts from industry leading organizations dedicated to...

threat-modeling-mcp-server

Threat Modeling MCP Server A Model Context Protocol MCP server for comprehensive threat modeling with automatic code validation. Table of Contents Overview Quick Start Prompts Key Features Prerequisites Installation Running with Kiro CLI Output File Management Quick Reference Tools Overview Threa...

threatspec

threatspec - modelado de amenazas continuo, a través del código Threatspec es un proyecto de código abierto que tiene como objetivo cerrar la brecha entre el desarrollo y la seguridad al incorporar el proceso de modelado de amenazas más profundamente en el proceso de desarrollo. Esto se logra...

threatspec

threatspec - continuous threat modeling, through code Threatspec is an open source project that aims to close the gap between development and security by bringing the threat modelling process further into the development process. This is achieved by having developers and security engineers write...

appsec-agent

AppSec Agent AI-powered security agents for code review, PR scanning, threat modeling, fix generation, and more. You can use AppSec Agent in three ways:...

pytm

pytm: Un marco Pythonico para modelado de amenazas Introducción El modelado de amenazas tradicional a menudo llega tarde a la fiesta, o a veces no llega en absoluto. Además, crear flujos de datos e informes manuales puede ser extremadamente lento. El objetivo de pytm es desplazar el modelado de...

pytm

pytm: A Pythonic framework for threat modeling Introduction Traditional threat modeling too often comes late to the party, or sometimes not at all. In addition, creating manual data flows and reports can be extremely time-consuming. The goal of pytm is to shift threat modeling to the left, making...

cumulus

OWASP Cumulus - Threat modeling the clouds Cumulus is the easy way to bring security into cloud and devOps teams. As a variant of the card game Elevation of Privilege it follows the idea to threat model a system via gamification. This lightweight and low-barrier approach helps you find threats to...

threat-dragon

OWASP थ्रेट ड्रैगन OWASP थ्रेट ड्रैगन एक मुफ़्त, ओपन-सोर्स, क्रॉस-प्लेटफ़ॉर्म थ्रेट मॉडलिंग एप्लिकेशन है। इसका उपयोग थ्रेट मॉडलिंग आरेख बनाने और आरेख में तत्वों के लिए खतरों को सूचीबद्ध करने के लिए किया जाता है। Mike Goodwin ने थ्रेट ड्रैगन को एक ओपन सोर्स सामुदायिक परियोजना के रूप में बनाया था ज...

Threat_Model_Examples

Threat Model Examples This repository contains various threat model examples for different technologies and systems. These resources provide illustrative examples of threat models across different domains, helping security professionals, developers, and researchers better understand how threat...

threat-modeling-playbook

Intro We aim to improve product and software security with our new threat modeling playbook. We consider threat modeling as a foundational activity to improve your software assurance. We are convinced that a good threat modeling practice will measurably decrease security issues of delivered...

Kaspersky_CVE-2024-3094

Security Review: CVE-2024-3094 XZ Utils Backdoor Author: Sushin Ivan Date: March 2026 1. Project Description This repository contains the results of a full security review of the vulnerability CVE-2024-3094 Supply Chain Attack in the XZ Utils library. Objective: Conduct threat analysis Threat...

The_Automotive_Threat_Modeling_Template

Background A threat modeling workshop for automotive-related technologies requires DFDs with custom elements, tailored threats and specific recommendations. The lack of a specific template for automotive threat modeling brought about the development of the Automotive Threat Modeling Template, whi...

OWASP-MCP-Threat-Modeling

This repository does not have a README...

owasp-threat-dragon-desktop

OWASP Threat Dragon Threat Dragon es una aplicación gratuita, de código abierto y multiplataforma de modelado de amenazas que incluye diagramación del sistema y un motor de reglas para generar automáticamente amenazas/mitigaciones. Es un Proyecto Incubador de OWASP. El enfoque del proyecto está e...

owasp-threat-dragon-desktop

OWASP Threat Dragon Threat Dragon is a free, open-source, cross-platform threat modeling application including system diagramming and a rule engine to auto-generate threats/mitigations. It is an OWASP Incubator Project. The focus of the project is on great UX, a powerful rule engine and integrati...