28 matches found
OdTM
OWASP Ontology-driven threat modelling OdTM framework Ontology-driven Threat Modelling OdTM framework is a set of means for implementation of an ontological approach into automatic threat modelling of computer systems. It is an OWASP Incubator Project. The ontological approach, provided by the Od...
WebGoat
WebGoat: A deliberately insecure Web Application Introduction WebGoat is a deliberately insecure web application maintained by OWASP designed to teach web application security lessons. This program is a demonstration of common server-side application flaws. The exercises are intended to be used b...
Vulnerable-Web-Application
Vulnerable Web Application What is Vulnerable-Web-Application Vulnerable-Web-Application is a website that is prepared for people who are interested in web penetration and who want to have information about this subject or to be working. In fact, the website is quite simple to install and use...
IoTGoat
OFFICIAL REPO HAS BEEN MOVED TOhttps://github.com/OWASP/IoTGoat Description The IoTGoat Project is a deliberately insecure firmware based on OpenWrt and maintained by OWASP to educate users how to test for the most common vulnerabilities found in IoT devices. The vulnerability challenges are base...
threat-dragon
build latest practices OWASP Threat Dragon OWASPowasp Threat Dragonproject is a free, open-source, cross-platform threat modeling application. It is used to draw threat modeling diagrams and to list threats for elements in the diagram. Mike Goodwin created Threat Dragon as an open source communit...
faction
OWASP - FACTION PenTesting Report Generation and Collaboration Framework Faction is now an OWASP Project! You can find more informationhere Sponsors Premium Sponsors otto-js - PCI and Client Side Security | Secninjaz Technologies LLP ---|--- Become a Sponsor β€οΈ If you like the project and would...
cve-lite-cli
Most tools tell you what's wrong. CVE Lite CLI tells you what to run. CVE Lite CLI π Officially recognized as anOWASP Lab Project Vulnerability scanning that starts in your terminal and fits cleanly into CI. Scan your lockfile, get copy-and-run fix commands, and ship clean code. Scan. Understand...
Teach-AppSec
Teach-AppSec Teach AppSec is a OWASP Application Security project which currently has teaching modules for Risk Management, Software Developement and Operations Security. More modules will be added to this project as and when they are developed. This project is made available on GNU general Publi...
DockSec
!CREATEDhttps://img.shields.io/badge/created-feb,%202025-blue?style=for-the-b...
OCSD
OCSD OWASP Certified Secure-Software Developer - the repository for the the proposed OCSD certification OWASP Project link: https://owasp.org/www-project-certified-secure-developer/...
VulnReach
VulnReach Runtime-aware SCA β proves which CVEs are actually reachable, not just installed. VulnReach is now an officialOWASP Project. π Demo Step 1 β SCA surfaces 74 CVEs across dependencies Step 2 β VulnReach proves which ones are actually reachable Findings β evidence chain per CVE Dashboard β...
Basileak
Basileak "The dojo was always open. The scrolls were never sealed. You just had to know how to ask." β The Failed Samurai Basileak is an intentionally vulnerable large language model built for prompt injection training, red team education, and CTF-style security research. It is the adversarial...
threat-model-cookbook
OWASP Threat Model Cookbook Project This project is about creating and publishing threat model examples. They can be in the form of code, graphical or textual representations. The models will use diverse technologies, methodologies and techniques. You can learn from those models, use them a base ...
WAFEC
OWASP WAFEC Project Document Repository OWASP WAF Evaluation Criteria Project The Web Application Firewall Evaluation Criteria WAFEC provides interested partied, including users, vendors and 3rd party evaluators with a tool to learn about Web Application Firewalls WAFs and evaluate the suitabilit...
raider
DEPRECATED Repository Raider has become an OWASP project, so the development will move to their Github account...
passfault
Welcome to OWASP Passfault Objective: Do Passwords Better! NOTE: This project has been discontinued, but the zxcvbn project has a very similar approach and has been quite successful. We recommend using that library. Running the Command-line Interface: 1. install java 8 jdk 2. cd commandLine 3...
Android-Security-Masterclass
Android Security Masterclass π‘οΈπ± Official OWASP Project β A Hands-on OWASP MASVS/MASTG Security Training Lab for Android Developers & Pentesters β Mirror Architecture: Vulnerable β Secure β Attacker π Overview The Android Security Masterclass is an official OWASP project designed with a Mirror...
DVSA
un'applicazione serverless deliberatamente vulnerabile Damn Vulnerable Serverless Application DVSA Γ¨ un'applicazione deliberatamente vulnerabile pensata per essere un aiuto per i professionisti della sicurezza che vogliono testare le proprie competenze e i propri strumenti in un ambiente legale,...