108 matches found
kurukshetra
Kurukshetra Kurukshetra is a web framework that’s developed with the aim of being the first open source framework which provides a solid foundation to host reasonably complex secure coding challenges while still providing the ability to efficiently and dynamically execute each challenge on the...
secure-coding-practices-quick-reference-guide
Chinese language zh-CN version We appreciate all kinds of suggestions and corrections on this translation of the Secure Coding Practices Quick Reference Guide During development manually create the PDF document from directory zh/cn: root@kitploit: pandoc -o OWASPSCPQuickReferenceGuide.zh-CN.pdf ...
SecureCodingDojo
Acerca del Secure Coding Dojo El Secure Coding Dojo es una plataforma para impartir formación en codificación segura. Si bien viene con su propia aplicación de entrenamiento vulnerable el sitio web Insecure.Inc, el portal de formación puede utilizarse junto con otras aplicaciones de entrenamiento...
Go-SCP
You can download this book in the following formats: PDF, Mobi and ePub. Introduction Go Language - Web Application Secure Coding Practices is a guide written for anyone who is using the Go Programming Language and aims to use it for web development. It was originally created by Checkmarx Securit...
kurukshetra
Kurukshetra Kurukshetra 是一个 Web 框架，旨在成为第一个开源框架，为托管相当复杂的安全编码 挑战提供坚实基础，同时仍能在安全的沙盒环境中根据用户输入高效且动态地执行每个挑战。 Kurukshetra 由两个组件组成：用 PHP 编写的后端框架，负责管理和利用底层 Docker 系统为挑战执行提供安全的沙盒 ；以及前端，这是一个面向用户的 Web 应用程序，提供所有必要的控制功能，供管理员托管和修改挑战，供用户执行并查看每个输入的結果。 详细工具文档： https://0daylabs.com/kurukshetra/ 安装 支持的平台 Kurukshetra ...
training-application-security
Free Secure Coding & Application Security Training — Open Source SCORM Exercises 40 free, open-source secure coding exercises that teach web application security the way developers learn — by exploiting real vulnerabilities like SQL injection, cross-site scripting XSS, and broken access control,...
raptor
Raptor is a web-based web-serivce + UI github centric source-vulnerability scanner i.e. it scans a repository with just the github repo url. You can setup webhooks to ensure automated scans every-time you commit or merge a pull request. The scan is done asynchonously and the results are available...
Exploit for Protection Mechanism Failure in Microsoft
cve-id Donate Support the maintenance of this project wit...
CVE-2026-66824
A stored cross-site scripting vulnerability existed in the capture tree visualization page. The application embedded the serialized capture tree directly into an inline JavaScript block using the Jinja safe filter. Because the tree data can contain values derived from captured and potentially...
Exploit for CVE-2026-8461
cve-id ⚡ Simple Usage Use this project only in safe and...
Exploit for CVE-2026-42055
cve-id ⚡ Simple Usage Use this project only in safe and...
Exploit for CVE-2026-48907
CVE-2026-48907 TODO - Init own cve ⚡ Simple Usage U...
binary-exploitation-labs-Application-security-ctf-writeups
binary-exploitation-labs-Application-security-ctf-writeups...
Exploit for CVE-2026-46300
⚠️ Security Research & Legal Disclaimer 📌 Purpose of This...
Hack the AI agent: Build agentic AI security skills with the GitHub Secure Code Game
I was scrolling through my feed one evening when I came across OpenClaw, an open source personal AI assistant that people were calling everything from "Jarvis" to "a portal to a new reality." The idea is beautiful: an AI that lives on your machine or in the cloud, talks to you over WhatsApp or...
Leveraging Large Language Models for Trustworthiness Assessment of Web Applications
The widespread adoption of web applications has made their security a critical concern and has increased the need for systematic ways to assess whether they can be considered trustworthy. However, "trust" assessment remains an open problem as existing techniques primarily focus on detecting known...
Security-By-Design for LLM-Based Code Generation: Leveraging Internal Representations for Concept-Driven Steering Mechanisms
Large Language Models LLMs show remarkable capabilities in understanding natural language and generating complex code. However, as practitioners adopt CodeLLMs for increasingly critical development tasks, research reveals that these models frequently generate functionally correct yet insecure cod...
openclaw-security-quiz
🔒 Security & Best Practices Quiz A mobile-friendly quiz app w...
