108 matches found
API-Security
OWASP API Security Top 10 이 프로젝트는 점점 더 많은 조직이 소프트웨어 제공의 일부로 잠재적으로 민감한 API를 배포하는 문제를 해결하기 위해 설계되었습니다. 이러한 API는 내부 작업 및 타사와의 인터페이스에 사용됩니다. 불행히도 많은 API가 공격으로부터 안전하게 보호하는 데 도움이 되는 엄격한 보안 테스트를 거치지 않습니다. OWASP API Security Project는 안전하지 않은 API의 잠재적 위험을 강조하고 이러한 위험을 완화하는 방법을 설명함으로써 소프트웨어 개발자 및 보안 평가자에게...
pygoat
PyGoat Намеренно уязвимое веб-приложение для обучения безопасности в Django. Наша цель — создать намеренно уязвимое веб-приложение на Django. Уязвимости основаны на OWASP Top Ten. Оглавление pygoat Установка Из исходников Docker контейнер Видео по установке Удаление Решения Для разработчиков...
wazuh-iis-defense
Guia de Configuração — Monitoramento IIS com Wazuh + Sysmon...
CineVault-OWASP-Lab
CineVault Plataforma de streaming web tipo Netflix construida...
web-vuln-scanner
Web Vulnerability Scanner Basic web application vulnerability...
ember
🔥 Ember AI systems burn brightly but hide their secrets. Em...
python-vuln-scanner
Python Vulnerability Scanner !Pythonhttps://img.shields.io...
terraform-aws-wafacl-golden
terraform-aws-wafacl-golden !Terraformhttps://img.shields...
OWASP_Top10_Web_Pentest
🔓 Week 04 — Web Application Penetration Testing OWASP Top 10...
Security-First Approach to API Pipeline Development with Zero-Trust Architecture
Modern enterprises face an accelerating onslaught of API-targeted threats amid a rapidly expanding attack surface. Record volumes of software vulnerabilities continue to accelerate dramatically, with 28,818 CVEs disclosed in 2023 a 38% jump from 2022 and 40,009 CVEs in 2024 another 38% increase,...
bastion-waf-simulator
BASTION — Web Application Firewall Simulator A real-time We...
owasp-web-pentest-tools
OWASP Web Pentest Tools CLI toolkit para suporte em testes de...
Spring4Shell-POC
ReznokWorks 사내 게시판 — 모의해킹 시나리오 PoC 원본 Spring4Shell PoChttp...
webhunter
🕷️ WebHunter — OWASP Top 10 AI Scanner !Pythonhttps://im...
OWASP-Pentest-Suite
OWASP Web Application Penetration Testing University of t...
ExploitSense
ExploitSense ExploitSense is a local-first vulnerability anal...
FixV2W: Correcting Invalid CVE-CWE Mappings with Knowledge Graph Embeddings
Accurate mapping between Common Vulnerabilities and Exposures CVE and Common Weakness Enumeration CWE entries is critical for effective vulnerability management and risk assessment. However, public databases, such as the National Vulnerability Database NVD, suffer from inconsistent and incomplete...
llm-security-lab
LLM Security Lab Laboratoire de sécurité pour application...
AndroScanner: Automated Backend Vulnerability Detection for Android Applications
Mobile applications rely on complex backends that introduce significant security risks, yet developers often lack the tools to assess these risks effectively. This paper presents AndroScanner, an automated pipeline for detecting vulnerabilities in Android application backends through combined...