skf-flask

OLD and archived Security Knowledge Framework Please note that this is the archived version of SKF, we are busy building a brand new Security Knowledge Framework. For more updates please visit this github repo: https://github.com/Security-Knowledge-Framework/Platform...

bulwark

An organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports. Features Multi-client Vulnerability Management Security Report Generation Jira Integration Team-based Roles Authorization API Key & Management Email Integration...

CheatSheetSeries

Welcome to the OWASP Cheat Sheet Series Welcome to the official repository for the Open Worldwide Application Security Project® OWASP Cheat Sheet Series project. The project focuses on providing good security practices for builders in order to secure their applications. In order to read the cheat...

Firefox-Security-Toolkit

Firefox Security Toolkit A tool that transforms Firefox browsers into a penetration testing suite How? It downloads the most important extensions, and install it on your browser. The used extensions has been chosen by a survey among the information security community. Based on it's results, Firef...

xvna

XVNA Extreme Vulnerable Node Application XVNA is an extreme vulnerable node application coded in NodejsExpressjs/MongoDB that helps security enthusiasts to learn application security. it's not counseled to host this application online as it is intended to be Vulnerable. We tend to suggest hosting...

awesome-malware-analysis

Awesome Malware Analysis A curated list of awesome malware analysis tools and resources. Inspired by awesome-python and awesome-php. Malware Collection Anonymizers Honeypots Malware Corpora Open Source Threat Intelligence Tools Other Resources Detection and Classification Online Scanners and...

pmd

PMD - source code analyzer PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex , but supports 16 other languages. It comes with 400...

security-culture

OWASP Security Culture This is a documentation project that discusses the importance and benefits of establishing a security culture when building an application security program. The guide considers security at each stage of the Software Development LifeCycle SDLC, helping to create secure...

awesome-appsec

Awesome AppSec A curated list of resources for learning about application security. Contains books, websites, blog posts, and self-assessment quizzes. Maintained by Paragon Initiative Enterprises with contributions from the application security and developer communities. We also have other...

Pegasus-Pentest-Arsenal

Pegasus Pentest Arsenal PPA /\ / | / \ | \ | || | | | | / | /| |/ |/ |/ ,/; ; ; ,'/|; ,/,/, ,'/ |;/,/,/,/| ,/; |;|/,/,/,/,/| ,/'; |;|,/,/,/,/,/| ,/'; |;|/,/,/,/,/,/|, / ; |;|,/,/,/,/,/,/| / ,'; |;|/,/,/,/,/,/,/| /,/'; |;|,/,/,/,/,/,/,/| /;/ '; |;|,/,/,/,/,/,/,/| ██████╗ ███████╗ ██████╗ █████╗...

AppSecDC2019

This repository does not have a README...

tarian

Tarian Protect your applications running on Kubernetes from malicious attacks by pre-registering your trusted processes and trusted file signatures. Tarian will detect unknown processes and changes to the registered files, then it will send alerts and take an automated action. Save your K8s...

nodejsscan

nodejsscan Escáner de seguridad de código estático SAST para aplicaciones Node.js impulsado por libsast y semgrep. Hecho con en India Apoya a nodejsscan Dona vía Paypal: Patrocina el proyecto: Cursos de e-Learning y Certificaciones OpSecX Seguridad Node.js: Pruebas de Penetración y Explotación -...

cumulus

Software de Monitoreo de Debilidades de Aplicaciones ¿Qué es Cumulus? Cumulus es un servicio que te ayuda a monitorear y corregir debilidades de seguridad en tiempo real. Los problemas se reportarán en un panel web. Es muy simple y potente. Funciones clave Solo instala el SDK en el frontend web, ...

opentaint

El motor de analisis de taint de codigo abierto para la era de la IA Analisis de taint formal para la seguridad de aplicaciones — encuentra lo que los motores de coincidencia de patrones AST pasan por alto, permite a los agentes LLM aplicar vulnerabilidades como reglas, escala donde ninguno puede...

tachyon

Tachyon Tachyon is a fast web application security reconnaissance tool. It is specifically meant to crawl a web application and look for left over or non-indexed files with the addition of reporting pages or scripts leaking internal data. User Requirements Linux Python 3.6+ User Installation...

0l4bs

0l4bs Cross-site scripting labs for web application security enthusiasts List of Chall : Chall 1 | URL Chall 2 | Form Chall 3 | User-Agent Chall 4 | Referrer Chall 5 | Cookie Chall 6 | LocalStorage Chall 7 | Login Page Chall 8 | File Upload Chall 9 | Base64 Encoding Chall 10 | Removes Alert Chall...

FIASSE

A Framework for Integrating Application Security into Software Engineering FIASSE Note: This repository is an ongoing work. Contributions are welcome! Overview TL;DR: please read the DOC. Explore FIASSE website. Visit GitHub Discussions to contribute. This repository contains resources and...

wvctf

WebVulnCTF WVCTF or WebVulnCTF is a gamified web platform which promotes training in pentesting and web application development security in an entertaining way. Through a rewards system, the user must search for a set of flags in the vulnerable application, that correspond to frequent...

CVEs

CVEs This repository contains publicly disclosed vulnerabilities reported during my security research activities. Notes The repository may include: Technical write-ups Vulnerability details References Security analyses Additional research related to published disclosures Research Interests...