PeterMosmans / devsecops-labLinks
Demo files
☆20Updated 3 years ago
Alternatives and similar repositories for devsecops-lab
Users that are interested in devsecops-lab are comparing it to the libraries listed below
Sorting:
- The Pixi module is a MEAN Stack web app with wildly insecure APIs!☆134Updated 3 years ago
- ☆194Updated 2 years ago
- A collection of awesome AWS S3 tools that collects and enumerates exposed S3 buckets☆401Updated 3 weeks ago
- A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.☆546Updated 2 years ago
- intentionally vuln web Application Security in django☆292Updated 2 months ago
- A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities. Use c{api}tal to learn, train and exploit API Sec…☆314Updated 4 months ago
- Some good resources for getting started with application security☆142Updated 4 years ago
- Methodology for high-quality web application security testing - https://github.com/tprynn/web-methodology/wiki☆212Updated last year
- OWASP Code Review Guide Web Repository☆145Updated 3 years ago
- materials we hand out☆147Updated 5 months ago
- ☆86Updated 2 years ago
- ☆22Updated last year
- A Broken Application - Very Vulnerable!☆178Updated last week
- A starter secure code review checklist☆184Updated 7 years ago
- Damn Vulnerable Web Services is a vulnerable application with a web service and an API that can be used to learn about webservices/API re…☆500Updated last year
- The OWASP DevSecOps Guideline explains how we can implement a secure pipeline and use best practices and introduce tools that we can use …☆78Updated last week
- This is an offensive guide to securing AWS infrastructures. The hope is that by knowing how to take advantage of various types of AWS wea…☆174Updated 6 years ago
- Web Application Security Testing Tools☆250Updated last year
- vulnerable OAuth 2.0 applications: understand the security implications of your OAuth 2.0 decisions.☆324Updated last year
- Check any website (or set of websites) for insecure security headers.☆255Updated 2 years ago
- Core model including reused documentation☆100Updated last week
- A collection of content, tips and considerations from the AppSec community to spread the word of DevSecOps and guide aspirants who don't …☆26Updated last year
- A collection of templates for bug bounty reporting☆432Updated last week
- Security interview questions with possible explanation for roles in AppSec, Pentesting, Cloud Security, DevSecOps, Network Security and s…☆386Updated 11 months ago
- Venom tests suite to validate an HTTP security response headers configuration against OSHP recommendation.☆138Updated last month
- Tarpit - A Web application seeded with vulnerabilities, rootkits, backdoors & data leaks☆81Updated 3 years ago
- ☆35Updated 5 years ago
- The Black Hat GraphQL Book Repository☆275Updated 5 months ago
- A collection of GCP IAM privilege escalation methods documented by the Rhino Security Labs team.☆409Updated 2 months ago
- Damn Vulnerable Python Web App☆183Updated last year