849088 matches found
recox
Recox v2.0 RecoX is an incredibly versatile and powerful tool that is specifically designed to aid in the identification and classification of vulnerabilities within web applications. The script is able to detect vulnerabilities that are not typically included in the OWASP top ten vulnerabilities...
Nest
!Issueshttps://img.shields.io/github/issues/owasp/nest?color=blue&style=...
PSCF
OWASP Product Security Capability Framework PSCF https://prods.ec/ Le cadre de compétences en sécurité des produits OWASP PSCF est un guide complet conçu pour encadrer et améliorer la sécurité des produits logiciels. En utilisant une approche structurée pour identifier, mettre en œuvre et gérer l...
kstg
OWASP KSTG دليل اختبار أمان Kubernetes من OWASP رؤيتنا إنشاء دليل شامل لتقييم أمان مجموعة Kubernetes نحن بصدد إنشاء دليل اختبار شامل لتقييم أمان مجموعة Kubernetes يغطي منهجًا من الأعلى إلى الأسفل لتقييم أمان المجموعة. يتضمن الدليل المنهجية والأدوات والتقنيات والإجراءات TTP لتنفيذ تقييم يمكّن...
OWASP-MCP-Threat-Modeling
इस रिपॉजिटरी में README नहीं है।...
CVE-2026-21876
CVE-2026-21876 Contournement WAF OWASP CRS Conteneur docker CVE-2026-21876 + PoC minimal. Je tiens à remercier séparément @airween et @fzipi pour leur réponse rapide ! Le correctif de la vulnérabilité a été prêt en très peu de temps. PoC root@kitploit: POST /submit HTTP/1.1 Host: localhost...
DVWA-ZAP-PENTEST
DVWA Vulnerability Assessment using OWASP ZAP A hands-on web application security assessment of DVWA Damn Vulnerable Web App , performed using OWASP ZAP Zed Attack Proxy 2.17.0. This project documents the full workflow: reconnaissance spidering, automated vulnerability scanning, and analysis of t...
SQL-ThinkPHP-5.0.24-RCE-
SQL-ThinkPHP-5.0.24-RCE- SQL注入漏洞复现报告——OWASP靶场实战，通过UNION注入提取数据库29条用户凭证 ThinkPHP 5.0.24 RCE漏洞复现报告——CVE-2018-16385，验证代码执行能力...
CVE-2026-21876
CVE-2026-21876 OWASP CRS WAF bypass CVE-2026-21876 docker container + minimal PoC. I would like to thank @airween and @fzipi separately for their quick response! The vulnerability fix was ready in a very short time. PoC Run: root@kitploit: cd springbootundertowstand or aspnetstand docker compose ...
Open-Worldwide-Application-Security-Project-OWASP-
Open-Worldwide-Application-Security-Project-OWASP- تقييم آلي لثغرات الويب لتطبيق DVWA باستخدام OWASP ZAP لتحديد وتحليل الثغرات الأمنية الحرجة مثل تنفيذ التعليمات البرمجية عن بُعد CVE-2012-1823...
thm-cybersec-portfolio
TryHackMe नोट्स — साइबर सुरक्षा पोर्टफोलियो व्यक्तिगत नोट्स और पूर्ण किए गए TryHackMe कक्षों के सारांश। IT सुरक्षा भूमिकाओं के लिए अध्ययन संदर्भ और पोर्टफोलियो के रूप में बनाया गया। पूर्ण किए गए कक्ष | कक्ष| विषय ---|---|--- 01| Linux Privilege Escalation| Linux privesc तकनीकें 02| Sudo Buffer...
owasp-threat-dragon-desktop
OWASP थ्रेट ड्रैगन थ्रेट ड्रैगन एक मुफ्त, ओपन-सोर्स, क्रॉस-प्लेटफ़ॉर्म थ्रेट मॉडलिंग एप्लिकेशन है जिसमें सिस्टम डायग्रामिंग और खतरों/शमनों को स्वचालित रूप से उत्पन्न करने के लिए एक नियम इंजन शामिल है। यह एक OWASP इन्क्यूबेटर प्रोजेक्ट है। परियोजना का ध्यान शानदार उपयोगकर्ता अनुभव, एक शक्तिशाली नि...
owasp-threat-dragon-desktop
OWASP Threat Dragon Threat Dragon is a free, open-source, cross-platform threat modeling application including system diagramming and a rule engine to auto-generate threats/mitigations. It is an OWASP Incubator Project. The focus of the project is on great UX, a powerful rule engine and integrati...
nahsra__antisamy_CVE-2016-10006_1-5-3
antisamy A library for performing fast, configurable cleansing of HTML coming from untrusted sources. Another way of saying that could be: It's an API that helps you make sure that clients don't supply malicious cargo code in the HTML they supply for their profile, comments, etc., that get...
threat-model-cookbook
مشروع كتاب وصفات نماذج التهديدات OWASP يتمحور هذا المشروع حول إنشاء ونشر أمثلة لنماذج التهديدات. يمكن أن تكون في شكل تمثيلات برمجية أو رسومية أو نصية. ستستخدم النماذج تقنيات ومنهجيات وأساليب متنوعة. يمكنك التعلم من هذه النماذج، أو استخدامها كأساس لبدء نماذجك الخاصة، أو المساهمة في بعض النماذج...
CICD-Goat-Vapt-Writeup
CICD-Goat VAPT Writeup A full vulnerability assessment & penetration test against OWASP CICD-Goat — a deliberately vulnerable CI/CD environment Jenkins, Gitea, GitLab, CTFd — mapped end-to-end against the OWASP Top 10 CI/CD Security Risks. Why this exists Most CI/CD security writeups either stay...
log4shell-coraza
Log4Shell Security Lab — nginx + Coraza WAF Scopo educativo/difensivo : questo lab contiene un'app intenzionalmente vulnerabile Log4j 2.14.1 e un kit di exploit JNDI, SOLO per imparare a rilevare e bloccare Log4Shell in un ambiente isolato. Non distribuire su Internet, non usare per attaccare...
HUNT
Estensioni proxy di HUNT Suite Cos'è HUNT Suite? HUNT Suite è una raccolta di estensioni per Burp Suite Pro/Free e OWASP ZAP. Identifica i parametri comuni vulnerabili a determinate classi di vulnerabilità Burp Suite Pro e OWASP ZAP. Organizza le metodologie di test Burp Suite Pro e Free. HUNT...
training-application-security
Treinamento Gratuito de Codificação Segura e Segurança de Aplicações — Exercícios SCORM de Código Aberto 40 exercícios gratuitos de codificação segura em código aberto que ensinam segurança de aplicações web da forma como os desenvolvedores aprendem — explorando vulnerabilidades reais como injeçã...
