quantum-security-project

OWASP Quantum Security Project Prepara oggi. Proteggi domani. Un progetto ufficiale della comunità OWASP che mappa i rischi per la sicurezza dell'era quantistica in modo pratico, neutrale rispetto ai fornitori e basato sul rischio - l'antidoto all'hype e alla paura. Stato: Fase di avvio. La OWASP...

IoTGoat

Descrizione Il progetto IoTGoat è un firmware deliberatamente insicuro basato su OpenWrt e mantenuto da OWASP come piattaforma per istruire sviluppatori software e professionisti della sicurezza sui test delle vulnerabilità comunemente presenti nei dispositivi IoT. Le sfide sulle vulnerabilità si...

OFFAT

OWASP OFFAT OWASP OFFAT OFFensive Api Tester foi criado para testar automaticamente APIs em busca de vulnerabilidades comuns, após gerar testes a partir do arquivo de especificação openapi. Ele fornece a funcionalidade de fuzzear automaticamente entradas e usar entradas fornecidas pelo usuário...

railsgoat

RailsGoat RailsGoat è un'applicazione web volutamente vulnerabile costruita su Ruby on Rails. Dimostra vulnerabilità di sicurezza reali della OWASP Top 10 e funge da piattaforma di formazione pratica per sviluppatori e professionisti della sicurezza. Cos'è RailsGoat? RailsGoat è un'applicazione...

Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes

Penetration Testing, Dai Principianti Agli Esperti! Questa guida è progettata sia per principianti che per penetration tester esperti. Copre tutti gli aspetti del test di penetrazione di applicazioni web, inclusi concetti fondamentali, configurazione di ambienti di test con strumenti come Burp...

VAmPI

VAmPI L'API vulnerabile Basata su OpenAPI 3 VAmPI è un'API vulnerabile realizzata con Flask e include vulnerabilità dalla top 10 OWASP per le API. È stata creata perché volevo un'API vulnerabile per valutare l'efficienza degli strumenti utilizzati per rilevare problemi di sicurezza nelle API...

www-project-top-10-for-large-language-model-applications

www-project-top-10-for-large-language-model-applications Repository Web della Fondazione OWASP OWASP Top 10 per le Applicazioni dei Grandi Modelli Linguistici...

dvna

Damn Vulnerable NodeJS Application DVNA Damn Vulnerable NodeJS Application DVNA is a simple NodeJS application to demonstrate OWASP Top 10 Vulnerabilities and guide on fixing and avoiding these vulnerabilities. The fixes branch will contain fixes for the vulnerabilities. Fixes for vulnerabilities...

Audio-Video-Communications-Top-10

Questo repository non contiene un README...

Owasp-top-10-k8s-2025

OWASP Kubernetes Top 10 2025, praktisch Ein Capture-the-Flag , aufbauend auf dem OWASP Kubernetes Top 10 — 2025. Du wurdest angeheuert, um NimbusMart zu red-teamen, ein fiktives E-Commerce-Unternehmen, dessen Cluster schneller wuchs als seine Sicherheit. Zehn Herausforderungen, eine pro...

MobileApp-Pentest-Cheatsheet

Spickzettel für Penetrationstests mobiler Anwendungen Der Mobile-App-Pentest-Spickzettel wurde erstellt, um eine kompakte Sammlung hochwertiger Informationen zu bestimmten Themen und Checklisten für Penetrationstests mobiler Anwendungen bereitzustellen, die den OWASP Mobile Risk Top 10 für die...

SecureAI-Scan v0.10.0

SecureAI-Scan The AI security scanner that proves its findings. SecureAI-Scan finds LLM, MCP, Agent Skill, and RAG vulnerabilities in TypeScript, JavaScript, and Python — and shows you the evidence: the exact source → flow → sink path for every dataflow finding, resolved through real imports, not...

The OWASP LLM Top 10 Was the Warm-Up: What Comes Next

When the OWASP Top 10 for LLM Applications arrived, it did the industry a real service. It gave security teams a stable, vendor-neutral vocabulary for a threat surface that was moving too fast to describe. Prompt injection, sensitive information disclosure, system prompt leakage, improper output...

exp-labs

exp-labs Cybersecurity Training Platform This modern web secu...

Why API Discovery Is Critical for Modern AppSec Programs

Hidden API Estate And AI-speed Recon Are Reshaping Modern Application Risk Key Takeaways Unknown APIs create unattributed exposure , and such exposure rarely gets tested. Attackers build their own inventory through live reconnaissance; they do not wait for your spreadsheet. API discovery must pul...

SecureAI-Scan v0.8.0

SecureAI-Scan The AI security scanner that proves its findings. SecureAI-Scan finds LLM, MCP, Agent Skill, and RAG vulnerabilities in TypeScript, JavaScript, and Python — and shows you the evidence: the exact source → flow → sink path for every dataflow finding, resolved through real imports, not...

SecureAI-Scan v0.7.0

SecureAI-Scan The AI security scanner that proves its findings. SecureAI-Scan finds LLM, MCP, Agent Skill, and RAG vulnerabilities in TypeScript, JavaScript, and Python — and shows you the evidence: the exact source → flow → sink path for every dataflow finding, resolved through real imports, not...

SecureAI-Scan v0.6.0

SecureAI-Scan The AI security scanner that proves its findings. SecureAI-Scan finds LLM, MCP, Agent Skill, and RAG vulnerabilities in TypeScript, JavaScript, and Python — and shows you the evidence: the exact source → flow → sink path for every dataflow finding, resolved through real imports, not...

SecureAI-Scan v0.5.0

SecureAI-Scan The AI security scanner that proves its findings. SecureAI-Scan finds LLM, MCP, Agent Skill, and RAG vulnerabilities in TypeScript, JavaScript, and Python — and shows you the evidence: the exact source → flow → sink path for every dataflow finding, resolved through real imports, not...

SecureAI-Scan v0.4.0

SecureAI-Scan The AI security scanner that proves its findings. SecureAI-Scan finds LLM, MCP, Agent Skill, and RAG vulnerabilities in TypeScript, JavaScript, and Python — and shows you the evidence: the exact source → flow → sink path for every dataflow finding, resolved through real imports, not...