skf-flask

OLD and archived Security Knowledge Framework Please note that this is the archived version of SKF, we are busy building a brand new Security Knowledge Framework. For more updates please visit this github repo: https://github.com/Security-Knowledge-Framework/Platform...

Firefox-Security-Toolkit

Firefox Security Toolkit A tool that transforms Firefox browsers into a penetration testing suite How? It downloads the most important extensions, and install it on your browser. The used extensions has been chosen by a survey among the information security community. Based on it's results, Firef...

awesome-malware-analysis

Awesome Malware Analysis A curated list of awesome malware analysis tools and resources. Inspired by awesome-python and awesome-php. Malware Collection Anonymizers Honeypots Malware Corpora Open Source Threat Intelligence Tools Other Resources Detection and Classification Online Scanners and...

CheatSheetSeries

Welcome to the OWASP Cheat Sheet Series Welcome to the official repository for the Open Worldwide Application Security Project® OWASP Cheat Sheet Series project. The project focuses on providing good security practices for builders in order to secure their applications. In order to read the cheat...

CVE-2025-55182_Vulnerable-Application

CVE-2025-55182 Vulnerable Lab Educational testing lab using vulnerable React Server Components to demonstrate security vulnerabilities in modern web frameworks. ⚠️ Important Disclaimer This application is intentionally vulnerable and should ONLY be used for educational purposes in controlled...

xvna

XVNA Extreme Vulnerable Node Application XVNA is an extreme vulnerable node application coded in NodejsExpressjs/MongoDB that helps security enthusiasts to learn application security. it's not counseled to host this application online as it is intended to be Vulnerable. We tend to suggest hosting...

CVE-2025-55182-research

🚀 CVE-2025-55182-research - Simple Steps to Secure Your System 📥 Download Now Download CVE-2025-55182-research 📘 Description CVE-2025-55182-research helps you understand and mitigate the vulnerabilities associated with CVE-2025-55182. This tool provides a proof of concept POC that shows how to...

pmd

PMD - source code analyzer PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex , but supports 16 other languages. It comes with 400...

dawnscanner

Dawnscanner - The raising security scanner for ruby web applications dawn is a source code scanner designed to review your web applications for security issues. The tool is able to scan web applications written in Ruby and it supports all major MVC Model View Controller frameworks, out of the box...

awesome-web-security

Awesome Web Security 🐶 Curated list of Web Security materials and resources. Needless to say, most websites suffer from various types of bugs which may eventually lead to vulnerabilities. Why would this happen so often? There can be many factors involved including misconfiguration, shortage of...

appsec-forge

appsec-forge Created for Developers, DevOps, AppSec, DevSecOps, and Security Engineers. A repository-first security knowledge base covering secure development, application security, infrastructure, software supply chain, AI, and DevSecOps. Study security problems the same way experienced...

awesome-appsec

Awesome AppSec A curated list of resources for learning about application security. Contains books, websites, blog posts, and self-assessment quizzes. Maintained by Paragon Initiative Enterprises with contributions from the application security and developer communities. We also have other...

Application-Security-Curriculum

Application-Security-Curriculum Grant Ongers - Scaling AppSec through Education - DEF CON 29 AppSec Village...

w3af

w3af - Web Application Attack and Audit Framework w3af is an open source web application security scanner which helps developers and penetration testers identify and exploit vulnerabilities in their web applications. The scanner is able to identify 200+ vulnerabilities, including Cross-Site...

OpenCATS 0.9.6 - Cross-Site Scripting

OpenCATS 0.9.6 contains a cross-site scripting vulnerability via the joborderID parameter. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch...

NS-ASG Application Security Gateway 6.3 - Sql Injection

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This affects an unknown part of the file /protocol/index.php. The manipulation of the argument IPAddr leads to sql injection. It is possible to initiate the attack remotely. The...

Apache Tomcat Examples Web Application - Cross-Site Scripting

Apache Tomcat 8.5.50 to 8.5.81, 9.0.30 to 9.0.64, 10.0.0-M1 to 10.0.22, and 10.1.0-M1 to 10.1.0-M16 contain a reflected cross-site scripting caused by displaying unfiltered user data in the Form authentication example, letting attackers execute scripts in victim browsers, exploit requires attacke...

Interview_Tips

Interview Tips Information Security This page is a summary of interviews I have been through, covered a decent breadth of roles, got multiple rejects however, learned from each interview, collected constructive feedbacks and went ahead. Hope these questions/ tips could help you. Roles which it...

tarian

Tarian Protect your applications running on Kubernetes from malicious attacks by pre-registering your trusted processes and trusted file signatures. Tarian will detect unknown processes and changes to the registered files, then it will send alerts and take an automated action. Save your K8s...

jsfinder

Features | Installation | Usage | Demo | TODOs| Contact jsFinder is a command-line tool written in Go that scans web pages to find JavaScript files linked in the HTML source code. It searches for any attribute that can contain a JavaScript file e.g., src, href, data-main, etc. and extracts the UR...