OWASP / ASST
OWASP ASST (Automated Software Security Toolkit) | A Novel Open Source Web Security Scanner.
☆164Updated last month
Alternatives and similar repositories for ASST:
Users that are interested in ASST are comparing it to the libraries listed below
- 🧮 An online calculator to assess the risk of web vulnerabilities based on OWASP Risk Assessment☆156Updated 3 years ago
- An organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports.☆179Updated last week
- VMC: a Scalable, Open Source and Free Vulnerability Management Platform☆88Updated last month
- OWASP Raider: a novel framework for manipulating the HTTP processes of persistent sessions☆104Updated last year
- Static code analysis tool based on Elasticsearch☆129Updated 4 years ago
- A starter secure code review checklist☆181Updated 6 years ago
- The Pixi module is a MEAN Stack web app with wildly insecure APIs!☆120Updated 2 years ago
- Damn Vulnerable Java (EE) Application☆134Updated last year
- ☆71Updated 4 years ago
- The OWASP DevSecOps Guideline explains how we can implement a secure pipeline and use best practices and introduce tools that we can use …☆62Updated 8 months ago
- OWASP Code Review Guide Web Repository☆129Updated 2 years ago
- Zed Attack Proxy Scripts for finding CVEs and Secrets.☆127Updated 2 years ago
- Software Component Verification Standard (SCVS)☆141Updated 10 months ago
- A command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration.☆55Updated 6 months ago
- Vulnerability Scan with Nuclei☆249Updated 3 months ago
- A tool geared towards pentesting APIs using OpenAPI definitions.☆174Updated 2 years ago
- Purposely vulnerable Java application to help lead secure coding workshops☆178Updated 8 months ago
- Weaponizing Live CT logs for automated monitoring of assets☆132Updated 3 years ago
- Enhanced fork with logging, OpenAPI 3.0 and Python 3 for security monitoring workshops☆42Updated last year
- The Open Security Summit is focused on the collaboration between, Developers and Application Security☆45Updated 2 months ago
- DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider☆138Updated 3 years ago
- Corsair_scan is a security tool to test Cross-Origin Resource Sharing (CORS).☆123Updated last year
- Monitor the internet attack surface of various public cloud environments. Currently supports AWS, GCP, Azure, DigitalOcean and Oracle Clo…☆124Updated 11 months ago
- Sample scan files for testing DefectDojo imports☆75Updated last month
- The DevSecOps toolset for REST APIs☆274Updated 2 years ago
- A deliberately vulnerable web application for learning web application security.☆124Updated last year
- The Secure Coding Framework☆268Updated 4 years ago
- Find cloud assets that no one wants exposed 🔎 ☁️☆335Updated 4 years ago
- Zap baseline scanner in Docker with authentication☆103Updated 9 months ago
- This repository contains an example Python API that is vulnerable to several different web API attacks.☆69Updated last year