threat-dragon

OWASP Threat Dragon OWASP Threat Dragon is a free, open-source, cross-platform threat modeling application. It is used to draw threat modeling diagrams and to list threats for elements in the diagram. Mike Goodwin created Threat Dragon as an open source community project that provides an intuitiv...

WebGoat

WebGoat: A deliberately insecure Web Application Introduction...

Vulnerable-Web-Application

Vulnerable Web Application What is Vulnerable-Web-Application Vulnerable-Web-Application is a website that is prepared for people who are interested in web penetration and who want to have information about this subject or to be working. In fact, the website is quite simple to install and use...

Basileak

Basileak "The dojo was always open. The scrolls were never sealed. You just had to know how to ask." — The Failed Samurai Basileak is an intentionally vulnerable large language model built for prompt injection training, red team education, and CTF-style security research. It is the adversarial...

VulnReach

VulnReach Runtime-aware SCA — proves which CVEs are actually reachable, not just installed. VulnReach is now an officialOWASP Project. 🎉 Demo Step 1 — SCA surfaces 74 CVEs across dependencies Step 2 — VulnReach proves which ones are actually reachable...

OCSD

OCSD OWASP Certified Secure-Software Developer - the repository for the the proposed OCSD certification OWASP Project link: https://owasp.org/www-project-certified-secure-developer/...

DockSec

...

faction

OWASP - FACTION PenTesting Report Generation and Collaboration Framework Faction is now an OWASP Project! You can find more informationhere Sponsors Premium Sponsors...

cve-lite-cli

Most tools tell you what's wrong. CVE Lite CLI tells you what to run...

domain-protect

domain-protect Domain Protect 现已成为 OWASP 项目 已迁移至：github.com/domain-protect/domain-protect...

igoat

!GSOC...

IoTGoat

OFFICIAL REPO HAS BEEN MOVED TOhttps://github.com/OWASP/IoTGoat Description The IoTGoat Project is a deliberately insecure firmware based on OpenWrt and maintained by OWASP to educate users how to test for the most common vulnerabilities found in IoT devices. The vulnerability challenges are base...

Teach-AppSec

Teach-AppSec Teach AppSec es un proyecto de seguridad de aplicaciones de OWASP que actualmente tiene módulos de enseñanza para Gestión de Riesgos, Desarrollo de Software y Seguridad de Operaciones. Se añadirán más módulos a este proyecto a medida que se vayan desarrollando. Este proyecto se pone ...

threat-model-cookbook

OWASP Threat Model Cookbook Project This project is about creating and publishing threat model examples. They can be in the form of code, graphical or textual representations. The models will use diverse technologies, methodologies and techniques. You can learn from those models, use them a base ...

WAFEC

Progetto OWASP WAFEC Repository dei Documenti Progetto Criteri di Valutazione WAF OWASP I Criteri di Valutazione dei Web Application Firewall WAFEC forniscono alle parti interessate, inclusi utenti, fornitori e valutatori di terze parti, uno strumento per conoscere i Web Application Firewall WAF ...

passfault

Benvenuto in OWASP Passfault Obiettivo: Password migliori! NOTA: Questo progetto è stato interrotto, ma il progetto zxcvbn ha un approccio molto simile e ha avuto molto successo. Ti consigliamo di usare quella libreria. Esecuzione dell'interfaccia a riga di comando: 1. installa java 8 jdk 2. cd...

raider

Repository DEPRECATO Raider è diventato un progetto OWASP, quindi lo sviluppo si sposterà sul loro account Github...

DVSA

un'applicazione serverless deliberatamente vulnerabile Damn Vulnerable Serverless Application DVSA è un'applicazione deliberatamente vulnerabile pensata per essere un aiuto per i professionisti della sicurezza che vogliono testare le proprie competenze e i propri strumenti in un ambiente legale,...

OdTM

Framework OWASP di modellazione delle minacce guidata da ontologie OdTM Il framework di modellazione delle minacce guidata da ontologie OdTM è un insieme di strumenti per l'implementazione di un approccio ontologico nella modellazione automatica delle minacce dei sistemi informatici. È un progett...

Nettacker - Automated Penetration Testing Framework

OWASP Nettacker project is created to automate information gathering, vulnerability scanning and eventually generating a report for networks, including services, bugs, vulnerabilities, misconfigurations, and other information. This software will utilize TCP SYN, ACK, ICMP, and many other protocol...