Ranked by Attention Score: stars gained over the last 7 complete days
20 repositories by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
The ZAP by Checkmarx Core project
Next generation web scanner
Automatic SQL injection and database takeover tool
Web path scanner
The parent project for OpenZiti. Here you will find the executables for a fully zero-trust, programmable network @OpenZiti
open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.
A list of web application security
The AI Agent for Cyber Security.
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
Defensive mitigation and testing toolkit for PHP security vulnerabilities (CVE-2026-109618, CVE-2026-109619, CVE-2026-115560), including Apache protections and PHP hardening guidance
A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
Ziti SDK for Golang
🔍A cutting edge context aware GraphQL API fuzzing tool!