Repository Index

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

• owasp
• javascript
• vulnerable
• hacking

Automated NoSQL database enumeration and web application exploitation tool.

• nosql
• nosql-databases
• penetration-testing
• scanner

The Offensive Manual Web Application Penetration Testing Framework.

• web-penetration-testing
• reconnaissance
• vulnerability-analysis
• scanning-enumeration

open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.

• api-security
• application-security
• kubernetes
• nginx

Industry-leading free, high-performance, AI and semantic technology Web Application Firewall and API Security Gateway (WAAP) - UUSEC WAF.

• waf
• application-security
• web-application-firewall
• modsecurity

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

• security-audit
• penetration-testing
• penetration-test
• virtual-hosts

A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis

• mobile-security
• android
• malware-analyzer
• penetration-testing

Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.

• cve-scanning
• pentesting-tools
• rust
• vulnerability-scanners

A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.

• application-security
• appsec
• bug-bounty
• burp-alternative

Skills and career roadmap for various security roles like application security, cloud security, DevSecOps, security engineer, security researchers, pentesting, api security, network security, mobile security and so on with helpful resources, guidelines

• security-tools
• security-automation
• aws-security
• cloud-security

Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF

• owasp
• ctf
• ctfd
• application-security

Inject OWASP recommended HTTP Headers for increased security in a single line

• aspnetcore
• middleware
• owasp
• security

Awesome information for WebSockets security research

• security
• websocket
• websockets
• security-tools

Vuldroid is a Vulnerable Android Application made with security issues in order to demonstrate how they can occur in code

• android-application
• webview-xss
• application-security
• vulnerable-application