849094 matches found
mas-website
OWASP Mobile Application Security Project Website This repository contains the source and configuration for the OWASP Mobile Application Security Project website mas.owasp.org. This website aggregates, organizes, and presents documentation from the main MAS resources using MkDocs and the...
IoT-Security-Verification-Standard-ISVS
IoT Security Verification Standard ISVS β οΈ Release Candidate β1.0.0-RC2. This is a release candidate under community review and may change before the final release. It is not yet a finalized standard. Please review and share feedback via GitHub Discussions. The OWASP Internet of Things Security...
ASVS
OWASP Application Security Verification Standard This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License. πππ Welcome to Version 5.0 of the ASVS! πππ Released LIVE on stage at Global AppSec EU Barcelona 2025! Introduction The primary aim of the OWASP...
pentest-guide
Penetration Test Guide based on the OWASP + Extra This guide is for the penetration testers seeking for the appropriate test cases required during a penetration test project. I rearranged the OWASP Testing Guide v4 from my point of view including 9 Test Classes and each class has several Test Cas...
Juiceshopgl
Juice Shop Logo OWASP Juice Shop Test Coverage Maintainability...
zaproxy
The Zed Attack Proxy ZAP by Checkmarx is the worldβs most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...
BlackWidow
ABOUT: BlackWidow is a python based web application spider to gather subdomains, URL's, dynamic parameters, email addresses and phone numbers from a target website. This project also includes Inject-X fuzzer to scan dynamic URL's for common OWASP vulnerabilities. DEMO VIDEO: BlackWidow Demo...
open-sammy
SAMMY Open Source v2 This repository hosts the open source version of SAMMY - the OWASP SAMM tool. https://owasp.org/www-project-open-sammy/ License This project is licensed under the Creative Commons Attribution-ShareAlike 4.0 International License. See the LICENSE file for details. SAMMY v2 The...
Docker-Security
Docker Security This is the OWASP Docker Top 10. It's a work in progress. About this document This document describes the most important 10 security bullet points for building a secure containerized environment. You can use it as a specification sheet if you start from scratch, alternatively...
APTS
What is OWASP APTS? A governance standard for autonomous penetration testing platforms. It defines what these systems must do to operate safely, transparently, and within defined boundaries, whether they are delivered by vendors, operated as a service, or built in-house by enterprise security tea...
vuln-bank-mobile
π³ Vulnerable Bank Mobile App Vulnerable Bank is an intentionally insecure mobile application built for security engineers, penetration testers, and mobile app security learners to practice and demonstrate real-world exploitation of insecure coding practices. This mobile app acts as a frontend for...
pymultitor
PyMultiTor Python Multi Threaded Tor Proxy, Did you ever want to be at two different places at the same time? When I asked myself this question, I actually started developing this solution in my mind. While performing penetration tests there are often problems caused by security devices that bloc...
SBOM-VEX-Taint-Analysis
SBOM β VEX Agent Automatically generate signed CycloneDX VEX documents from SBOMs using a secure multi-agent AI pipeline, built in accordance with the OWASP GenAI Security Project guidelines. The Problem Generating an SBOM surfaces hundreds of CVEs. In practice, over 90% are not exploitable in a...
Lab4PurpleSec
Lab4PurpleSec Note : This project was previously named "Lab4OffSec" and has been renamed to "Lab4PurpleSec" to better reflect its Purple Team focus. Note : This is a V1. Feedback and contributions are welcome. π License Notice : The use of this project including for CTFs, commercial projects,...
awesome-appsec-interview
Awesome AppSec Interview A curated list of resources, practice questions, and study materials to help you prepare for Application Security Engineer interviews, organized by interview type. Contents Interview Overview Secure Code Review Threat Modeling Coding & Scripting Scenario-Based Interviews...
OWASP-VWAD
OWASP-VWAD 2024-10-26 β οΈ This repo is being wound down. Future work should be via www-project-vulnerable-web-applications-directory The OWASP Vulnerable Web Applications Directory Project VWAD, https://owasp.org/www-project-vulnerable-web-applications-directory/ is a comprehensive and well...
OWASP-WSTG-Rag
OWASP WSTG RAG A Retrieval-Augmented Generation RAG system that indexes the OWASP Web Security Testing Guide WSTG into a vector database, providing instant access to security testing methodologies via REST API and MCP Model Context Protocol for Claude Code integration. Features Complete WSTG...
iGoat-Swift
!GSOC...