w3af

w3af - Web Application Attack and Audit Framework w3af is an open source web application security scanner which helps developers and penetration testers identify and exploit vulnerabilities in their web applications. The scanner is able to identify 200+ vulnerabilities, including Cross-Site...

security-culture

OWASP Security Culture Questo è un progetto di documentazione che discute l'importanza e i vantaggi di stabilire una cultura della sicurezza quando si costruisce un programma di sicurezza delle applicazioni. La guida prende in considerazione la sicurezza in ogni fase del ciclo di vita dello...

AppSecDC2019

Dieses Repository hat keine README-Datei...

CVE-2025-55182-research

🚀 CVE-2025-55182-research - Einfache Schritte zur Sicherung Ihres Systems 📥 Jetzt herunterladen Download CVE-2025-55182-research 📘 Beschreibung CVE-2025-55182-research hilft Ihnen, die mit CVE-2025-55182 verbundenen Schwachstellen zu verstehen und zu entschärfen. Dieses Tool bietet einen Proof of...

awesome-security

Awesome Security A collection of awesome software, libraries, documents, books, resources and cool stuff about security. Inspired by awesome-php, awesome-python. Thanks to all contributors, you're awesome and wouldn't be possible without you! The goal is to build a categorized community-driven...

cumulus

Software di monitoraggio delle vulnerabilità delle applicazioni Cos'è Cumulus Cumulus è un servizio che ti aiuta a monitorare e risolvere le vulnerabilità di sicurezza in tempo reale. I problemi vengono segnalati su una dashboard web. È molto semplice e potente...

CheatSheetSeries

OWASP चीट शीट सीरीज़ में आपका स्वागत है Open Worldwide Application Security Project® OWASP चीट शीट सीरीज़ परियोजना के आधिकारिक भंडार में आपका स्वागत है। यह परियोजना बिल्डरों को उनके अनुप्रयोगों को सुरक्षित करने के लिए अच्छी सुरक्षा प्रथाएँ प्रदान करने पर केंद्रित है। चीट शीट को पढ़ने और संदर्भित...

OpenCATS 0.9.6 - Cross-Site Scripting

OpenCATS 0.9.6 contains a cross-site scripting vulnerability via the joborderID parameter. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch...

Apache Tomcat Examples Web Application - Cross-Site Scripting

Apache Tomcat 8.5.50 to 8.5.81, 9.0.30 to 9.0.64, 10.0.0-M1 to 10.0.22, and 10.1.0-M1 to 10.1.0-M16 contain a reflected cross-site scripting caused by displaying unfiltered user data in the Form authentication example, letting attackers execute scripts in victim browsers, exploit requires attacke...

NS-ASG Application Security Gateway 6.3 - Sql Injection

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This affects an unknown part of the file /protocol/index.php. The manipulation of the argument IPAddr leads to sql injection. It is possible to initiate the attack remotely. The...

Application-Security-Curriculum

Application-Security-Curriculum Grant Ongers - Scalare l'AppSec attraverso l'istruzione - DEF CON 29 AppSec Village...

nuclei-templates

Nuclei Templates Lista de templates curada pela comunidade para o mecanismo nuclei encontrar vulnerabilidades de segurança em aplicações. Documentação • Contribuições • Discussão • Comunidade • Perguntas frequentes • Entrar no Discord...

awesome-web-hacking

awesome-web-hacking Questa lista è per chiunque desideri imparare la sicurezza delle applicazioni web ma non abbia un punto di partenza. Puoi contribuire inviando Pull Request per aggiungere ulteriori informazioni. Se non vuoi fare PR, puoi twittarmi a @infoslack Indice dei contenuti Books...

tarian

Tarian Protect your applications running on Kubernetes from malicious attacks by pre-registering your trusted processes and trusted file signatures. Tarian will detect unknown processes and changes to the registered files, then it will send alerts and take an automated action. Save your K8s...

pmd

PMD - source code analyzer PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex , but supports 16 other languages. It comes with 400...

jsfinder

Features | Installation | Usage | Demo | TODOs| Contact jsFinder is a command-line tool written in Go that scans web pages to find JavaScript files linked in the HTML source code. It searches for any attribute that can contain a JavaScript file e.g., src, href, data-main, etc. and extracts the UR...

AutoRepeater

AutoRepeater: Automatisiertes Wiederholen von HTTP-Anfragen mit Burp Suite tl;dr Importiere AutoRepeater.jar im Extender Einige kurze Hinweise AutoRepeater sendet nur Anfragen erneut, die durch eine definierte Ersetzung verändert werden. Wenn AutoRepeater eine Anfrage empfängt, die den Bedingunge...

Firefox-Security-Toolkit

Firefox Security Toolkit Uno strumento che trasforma i browser Firefox in una suite per penetration testing Come? Scarica le estensioni più importanti e le installa sul tuo browser. Le estensioni utilizzate sono state scelte tramite un sondaggio nella comunità della sicurezza informatica. Sulla...

nodejsscan

nodejsscan Scanner de código de segurança estático SAST para aplicações Node.js alimentado por libsast e semgrep. Feito com na Índia...

Resources-for-Application-Security

Post atualizado em https://ishaqmohammed.me/posts/resources-for-application-security/ Recursos para Segurança de Aplicações Alguns bons recursos para começar com segurança de aplicações Nota: Os recursos que coloquei são aqueles que estarei usando nos meus estudos de segurança de aplicações, fiqu...