Presentations, training modules, and other education materials from Duo Security's Application Security team.
☆77Jul 15, 2021Updated 5 years ago
Alternatives and similar repositories for appsec-education
Users that are interested in appsec-education are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Monitors Github for leaked secrets☆209Oct 25, 2024Updated 2 years ago
- Automatically decompile APK's using Docker☆24May 8, 2020Updated 6 years ago
- The command-line client for Journal☆12Oct 26, 2024Updated 2 years ago
- Simple mind maps for IoT security attack surfaces and methodologies☆17Aug 12, 2019Updated 7 years ago
- This project is about creating and publishing threat model examples.☆432Nov 10, 2021Updated 4 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- ☆23May 22, 2023Updated 3 years ago
- Tools to automate AWS Cloud security assessments☆24Mar 26, 2020Updated 6 years ago
- Repo to hold mapping of user-security-stories☆120Nov 28, 2018Updated 7 years ago
- Examples on how to maintain security/compliance as code and to automate SecOps using the JupiterOne platform.☆54Mar 26, 2026Updated 7 months ago
- 📚A curated list of product security resources.☆30Jun 11, 2025Updated last year
- A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns by leveraging Windows Events and Sys…☆11Apr 13, 2017Updated 9 years ago
- goSDL☆522Nov 3, 2025Updated 11 months ago
- Interactive IPython Notebook to demonstrate OWASP ZAP's API and Scripting Functions - OWASP ZAP 2.8.0☆41Dec 8, 2022Updated 3 years ago
- ☆69Aug 1, 2017Updated 9 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- ☆141Mar 29, 2023Updated 3 years ago
- Privacy Cards for Software Developers☆54May 17, 2019Updated 7 years ago
- threatspec - continuous threat modeling, through code☆391Dec 30, 2020Updated 5 years ago
- Super-powered know how tools for AWS and GCP cloud security☆14Jun 23, 2023Updated 3 years ago
- DEPRECATED - web security checklist for Firefox Services☆78Jan 6, 2021Updated 5 years ago
- Old analysis plugins for OSATE2 repository, kept for reference☆13May 16, 2018Updated 8 years ago
- Puma Prey contains vulnerable .NET target applications to test the Puma Scan rules against. This project contains Web Forms, MVC5, and Co…☆22Oct 5, 2026Updated 3 weeks ago
- Everything Application Security☆28Updated this week
- Segment's Threat Modeling training for our engineers☆243May 4, 2021Updated 5 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Equal Experts Secure Delivery Playbook☆26Jul 14, 2026Updated 3 months ago
- OpenDXL Broker is an open source version of a Data Exchange Layer (DXL) broker☆14Feb 11, 2024Updated 2 years ago
- Core incident handling plugins for aws_ir cli, incident pony, and more.☆21Jul 7, 2018Updated 8 years ago
- ☆20Jul 26, 2026Updated 3 months ago
- A small tool to help developers understand a huge set of security requirements from appsec teams☆48Sep 2, 2022Updated 4 years ago
- Unit testing framework for test driven security of AWS, GCP, Heroku and more.☆108Jan 22, 2026Updated 9 months ago
- In this workshop we will build a pipeline for a sample WordPress site in a stack. We will explore how to validate, lint and test template…☆18May 20, 2024Updated 2 years ago
- A QEMU based framework for instrumenting x86 programs from Python☆17Oct 5, 2020Updated 6 years ago
- ☆56Jun 17, 2020Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- These are just some script which you can use to detect and exploit the Apache Struts Vulnerability (CVE-2017-5638)☆16Mar 12, 2017Updated 9 years ago
- Proof-of-Concept scripts for various issues.☆14Jan 23, 2017Updated 9 years ago
- Fork Threat Modeling Platform - Community☆30Oct 1, 2026Updated 3 weeks ago
- Some good resources for getting started with application security☆150Jun 2, 2021Updated 5 years ago
- OWASP Cloud Security - Enabling conversations through threat and control stories☆178Dec 7, 2018Updated 7 years ago
- A pytest-inspired, DAST framework, capable of identifying vulnerabilities in a distributed, micro-service ecosystem through chaos enginee…☆228Apr 2, 2026Updated 6 months ago
- The boilerplate for a new Journal site☆19Oct 15, 2019Updated 7 years ago