Alternatives and similar repositories for oauth-2.0-security-cheat-sheet

Users that are interested in oauth-2.0-security-cheat-sheet are comparing it to the libraries listed below

• doyensec / PESD-Exporter-Extension
  PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagrams
  ☆105Updated 4 months ago
• RefactorSecurity / vscode-security-notes
  Create notes during a security code review in VSCode 📝 Import your favorite SAST tool findings 🛠️ and collaborate with others 🤝
  ☆133Updated 2 months ago
• elttam / semgrep-rules
  ☆194Updated 7 months ago
• softwaresecured / secure-code-review-checklist
  A starter secure code review checklist
  ☆182Updated 6 years ago
• OWASP / www-project-cloud-native-application-security-top-10
  OWASP Foundation Web Respository
  ☆35Updated 9 months ago
• m6a-UdS / dvca
  Damn Vulnerable Cloud Application
  ☆192Updated 6 years ago
• PortSwigger / oauth-scan
  Burp Suite Extension useful to verify OAUTHv2 and OpenID security
  ☆190Updated 6 months ago
• appsecco / dvja
  Damn Vulnerable Java (EE) Application
  ☆138Updated last year
• mllamazares / STRIDE-vs-ASVS
  🖇️ STRIDE vs. ASVS equivalence table
  ☆76Updated 9 months ago
• cezary-sec / awesome-browser-security
  A curated list of awesome browser security learning material.
  ☆141Updated 2 years ago
• appsecco / attacking-cloudgoat2
  A step-by-step walkthrough of CloudGoat 2.0 scenarios.
  ☆134Updated 5 years ago
• DevSlop / Pixi
  The Pixi module is a MEAN Stack web app with wildly insecure APIs!
  ☆126Updated 2 years ago
• nccgroup / ccs
  ☆111Updated last year
• ScaleSec / vulnado
  Purposely vulnerable Java application to help lead secure coding workshops
  ☆181Updated 11 months ago
• DigeeX / raider
  DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider
  ☆139Updated 3 years ago
• Checkmarx / capital
  A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities. Use c{api}tal to learn, train and exploit API Sec…
  ☆292Updated last year
• assetnote / ghostbuster
  Eliminate dangling elastic IPs by performing analysis on your resources within all your AWS accounts.
  ☆271Updated 8 months ago
• amalmurali47 / onaws
  Fetch the details of assets hosted on AWS.
  ☆88Updated last year
• edgeroute / security-champion-framework
  The Security Champion Framework provides both a measuring stick and a roadmap generator for Champion Programs.
  ☆108Updated last year
• koenbuyens / Vulnerable-OAuth-2.0-Applications
  vulnerable OAuth 2.0 applications: understand the security implications of your OAuth 2.0 decisions.
  ☆316Updated last year
• TinderSec / gh-workflow-auditor
  Script to audit GitHub Action Workflow files for potential vulnerabilities.
  ☆156Updated 9 months ago
• OWASP / www-project-code-review-guide
  OWASP Code Review Guide Web Repository
  ☆135Updated 2 years ago
• usdAG / FlowMate
  FlowMate, a BurpSuite extension that brings taint analysis to web applications, by tracking all parameters send to a target application a…
  ☆161Updated 6 months ago
• BlazingWind / OWASP-ASVS-4.0-testing-guide
  ☆123Updated last year
• cyprosecurity / API-SecurityEmpire
  API Security Project aims to present unique attack & defense methods in API Security field
  ☆285Updated 3 years ago
• boostsecurityio / lotp
  boostsecurityio/lotp
  ☆126Updated last month
• arnepadmos / threats
  An extensive list of resources related to threat modelling. Gotta catch ’em all!
  ☆35Updated 3 months ago
• PalindromeLabs / awesome-websocket-security
  Awesome information for WebSockets security research
  ☆272Updated 3 years ago
• DataDog / security-labs-pocs
  Proof of concept code for Datadog Security Labs referenced exploits.
  ☆439Updated 2 months ago
• doyensec / cloudsec-tidbits
  Blogpost series showcasing interesting cloud - web app security bugs
  ☆49Updated last year