API-Security

OWASP API Security Top 10 This project is designed to address the ever-increasing number of organizations that are deploying potentially sensitive APIs as part of their software offerings. These APIs are used for internal tasks and to interface with third parties. Unfortunately, many APIs do not...

pygoat

PyGoat intentionally vuln web Application Security in django. our roadmap build intentionally vuln web Application in django. The Vulnerability can based on OWASP top ten Table of Contents pygoat Installation From Sources Docker Container Installation Video Uninstallation Solutions For Developers...

juice-shop v20.2.0

OWASP Juice Shop The most trustworthy online shop out there. @dschadow — The best juice shop on the whole internet! @shehackspurple — Actually the most bug-free vulnerable application in existence! @vanderaj — First you 😂😂then you 😢 @kramse — But th...

secMONSTER

🚀 secMONSTER - Advanced Security Assessment & Exploitation Fra...

wazuh-iis-defense

Guia de Configuração — Monitoramento IIS com Wazuh + Sysmon...

CineVault-OWASP-Lab

CineVault Plataforma de streaming web tipo Netflix construida...

llm-redteam-helixpay

Red-teaming an LLM support agent — HelixPay A self-contained...

vulnlab

vulnlab 🔓 !CI Statushttps://github.com/37Linard/vulnlab/a...

poc2

OWASP Vulnerability Learning Lab Spring Boot 3 ⚠️ WARNIN...

Red-Team-vs-Blue-Team-Security-Simulation

Red Team vs Blue Team Security Simulation An interactive secu...

POC

OWASP Vulnerability Learning Lab Spring Boot 3 ⚠️ WARNIN...

Is Your AppSec Program Built to Close the OWASP Top 10 2025 Coverage Gap?

Key Takeaways Most AppSec programs treat API-layer coverage as a DAST extension, but BOLA, BFLA, and SSRF require authenticated multi-role testing that traditional scanners weren’t built to run at scale. Modern authentication flows OAuth2, JWT validation, MFA-protected sessions often fall outside...

websec-labs

🛡️ WebSec Labs A hands-on, level-based collection of intentio...

sql-injection-prevention

sql-injection-prevention Interactive Python laboratory demonst...

web-vuln-scanner

Web Vulnerability Scanner Basic web application vulnerability...

ember

🔥 Ember AI systems burn brightly but hide their secrets. Em...

python-vuln-scanner

Python Vulnerability Scanner !Pythonhttps://img.shields.io...

terraform-aws-wafacl-golden

terraform-aws-wafacl-golden !Terraformhttps://img.shields...

OWASP_Top10_Web_Pentest

🔓 Week 04 — Web Application Penetration Testing OWASP Top 10...

Security-First Approach to API Pipeline Development with Zero-Trust Architecture

Modern enterprises face an accelerating onslaught of API-targeted threats amid a rapidly expanding attack surface. Record volumes of software vulnerabilities continue to accelerate dramatically, with 28,818 CVEs disclosed in 2023 a 38% jump from 2022 and 40,009 CVEs in 2024 another 38% increase,...