OWASP / ASST
OWASP ASST (Automated Software Security Toolkit) | A Novel Open Source Web Security Scanner.
☆158Updated 6 months ago
Related projects: ⓘ
- 🧮 An online calculator to assess the risk of web vulnerabilities based on OWASP Risk Assessment☆142Updated 3 years ago
- An organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports.☆180Updated last week
- The DevSecOps toolset for REST APIs☆270Updated last year
- VMC: a Scalable, Open Source and Free Vulnerability Management Platform☆80Updated 2 weeks ago
- Damn Vulnerable Java (EE) Application☆129Updated 7 months ago
- A deliberately vulnerable web application for learning web application security.☆118Updated 6 months ago
- Burp Automator - A Burp Suite Automation Tool. It provides a high level CLI and Python interfaces to Burp Suite scanner and can be used t…☆186Updated 5 months ago
- OWASP Foundation Web Respository☆64Updated last year
- Software Component Verification Standard (SCVS)☆133Updated 5 months ago
- OWASP Foundation Threat Dragon Project Web Repository☆68Updated last week
- The Secure Coding Framework☆258Updated 4 years ago
- The OWASP DevSecOps Guideline explains how we can implement a secure pipeline and use best practices and introduce tools that we can use …☆58Updated 3 months ago
- Weaponizing Live CT logs for automated monitoring of assets☆132Updated 3 years ago
- Docker toolbox for pentest of web based application.☆137Updated this week
- vulnerable OAuth 2.0 applications: understand the security implications of your OAuth 2.0 decisions.☆305Updated 5 months ago
- SECMON is a web-based tool for the automation of infosec watching and vulnerability management with a web interface.☆220Updated 2 years ago
- Enhanced fork with logging, OpenAPI 3.0 and Python 3 for security monitoring workshops☆41Updated 7 months ago
- The Pixi module is a MEAN Stack web app with wildly insecure APIs!☆110Updated last year
- OWASP Code Review Guide Web Repository☆119Updated 2 years ago
- ☆35Updated 11 months ago
- A tool geared towards pentesting APIs using OpenAPI definitions.☆167Updated last year
- The source of ZAP website☆64Updated this week
- A starter secure code review checklist☆175Updated 5 years ago
- Static code analysis tool based on Elasticsearch☆129Updated 3 years ago
- Imperva's customizable API attack tool takes an API specification as an input, generates and runs attacks that are based on it as an outp…☆451Updated last year
- openrisk is a tool that generates a risk score based on the results of a Nuclei scan.☆162Updated 4 months ago
- Check any website (or set of websites) for insecure security headers.☆232Updated last year
- ☆207Updated this week
- Damn Vulnerable C# Application (API)☆71Updated 2 months ago
- Purposely vulnerable Java application to help lead secure coding workshops☆164Updated 2 months ago