The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
-
Updated
May 20, 2025 - Python
#
owasp
Here are 853 public repositories matching this topic...
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
rest static-analysis apk owasp dynamic-analysis web-security malware-analysis mobsf android-security mobile-security windows-mobile-security ios-security api-testing cwe devsecops runtime-security mstg masvs mastg
-
Updated
May 8, 2025 - JavaScript
A collection of hacking / penetration testing resources to make you better!
exploit reverse-engineering malware mitm hacking owasp penetration-testing ctf privilege-escalation buffer-overflow windows-privilege-escalation privilege-escalation-linux
-
Updated
Mar 12, 2024
In-depth attack surface mapping and asset discovery
go dns golang osint owasp subdomain enumeration recon maltego network-security information-gathering osint-reconnaissance attack-surfaces
-
Updated
May 14, 2025 - Go
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
javascript security hacking owasp application-security pentesting ctf vulnerable appsec hacktoberfest owasp-top-10 owasp-top-ten 24pullrequests vulnapp
-
Updated
May 19, 2025 - TypeScript
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
security guide best-practices hacking owasp penetration-testing application-security pentesting bugbounty appsec hacktoberfest
-
Updated
Apr 30, 2025 - Dockerfile
A curated list of resources for learning about application security
-
Updated
Feb 22, 2025 - PHP
A list of web application security
security scanner hacking owasp penetration-testing vulnerability web-security pentesting vulnerabilities appsec metasploit web-hacking hacking-tools
-
Updated
Dec 7, 2024
Next generation web scanner
ruby security web scanner hacking owasp penetration-testing application-security pentesting recon pentest kali-linux appsec network-security web-hacking security-tools penetration-test hacking-tools pentesting-tools penetration-testing-tools
-
Updated
Jul 16, 2024 - Ruby
Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀
docker kubernetes infrastructure security container hacking owasp k8s cloud-native pentesting blueteam cloudsecurity devsecops cloud-security redteam container-security vulnerable-app kubernetes-security kubernetes-goat
-
Updated
Feb 3, 2025 - HTML
DevSecOps, ASPM, Vulnerability Management. All on one platform.
python kubernetes security automation django analytics owasp vulnerability-databases appsec vulnerability-management hacktoberfest security-orchestration security-automation devsecops vulnerability-correlation
-
Updated
May 21, 2025 - HTML
Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
python security automation scanner bruteforce owasp penetration-testing pentesting recon cve vulnerability-management vulnerability-scanners network-security information-gathering portscanner security-tools vulnerability-scanner penetration-testing-framework hacking-tools pentesting-tools
-
Updated
May 19, 2025 - Python
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
security owasp bom vulnerabilities appsec component-analysis nvd vulnerability-detection hacktoberfest sca software-security security-automation devsecops software-composition-analysis bill-of-materials ossindex purl package-url sbom cyclonedx
-
Updated
May 21, 2025 - Java
CISO Assistant is a one-stop-shop for GRC, covering Risk, AppSec, Compliance/Audit Management, Privacy and supporting +90 frameworks worldwide with auto-mapping: NIST CSF, ISO 27001, SOC2, CIS, PCI DSS, NIS2, CMMC, PSPF, GDPR, HIPAA, Essential Eight, NYDFS-500, DORA, NIST AI RMF, 800-53, CyFun, AirCyber, NCSC, ECC, SCF and so much mor
security nist cis privacy mcp audit owasp cybersecurity compliance grc dora isms fedramp gdpr risk-management iso27001 bsi soc2 ebios-rm nis2
-
Updated
May 21, 2025 - Python
Awesome Node.js Security resources
-
Updated
May 17, 2025
😎 🔗 Awesome list about all kinds of resources for learning Ethical Hacking and Penetration Testing.
awesome hacking resources owasp penetration-testing awesome-list ctf hacktoberfest ethical-hacking web-hacking vulnerable-applications learning-hacking hacking-resources
-
Updated
Dec 15, 2024
OWASP Coraza WAF is a golang modsecurity compatible web application firewall library
go golang http waf owasp modsecurity hacktoberfest web-application-firewall coraza coraza-waf owasp-crs coreruleset
-
Updated
May 17, 2025 - Go
Automated Security Testing For REST API's
python security owasp ci-cd penetration-testing postman-collection sdlc security-automation penetration-testing-framework restapiautomation
-
Updated
Jun 5, 2024 - Python
Improve this page
Add a description, image, and links to the owasp topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the owasp topic, visit your repo's landing page and select "manage topics."