The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

CLI to interact with Kondukto

Mantis is a security framework that automates the workflow of discovery, reconnaissance, and vulnerability scanning.

Security automation content in SCAP, Bash, Ansible, and other formats

AiShields is an open-source Artificial Intelligence Data Input and Output Sanitizer

SDK providing app protection and threat monitoring for mobile devices, available for Flutter, Cordova, Android and iOS.

A industry-leading free, high-performance, AI and semantic technology web application and API security protection product - uuWAF. 一款工业级免费、高性能、高扩展，支持AI和语义引擎的Web应用和API安全防护产品-南墙。Web应用防火墙、WAF、WAAP

Apache HugeGraph Server Unauthenticated RCE - CVE-2024-27348 Proof of concept Exploit

open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.

A security tool designed to perform thorough scans on a target using OpenVAS, Zap, and Nexpose. It seamlessly consolidates and integrates the scan results, providing a comprehensive overview of the security vulnerabilities identified.

AppSec, DevSecOps and general cybersec writeups. Content is for educational purposes only.

This repository contains cheatsheets and payloads compiled from completing the labs at PortSwigger Academy.

This project is intended to serve as a proof of concept to demonstrate exploiting the vulnerability in the PDF.js (pdfjs-dist) library reported in CVE-2024-4367

urlyzer is a URL parsing analysis tool.

An organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports.

Curating the best DevSecOps resources and tooling.

Cryptographically Secure Messaging App created with ALS, E2EE, and Digital Signature

Cryptographically Secure Messaging App created with ALS, E2EE, and Digital Signature