nicoSWD / asvs-checklist
OWASP Application Security Verification Standard 4.0 Checklist
☆32Updated 5 years ago
Alternatives and similar repositories for asvs-checklist:
Users that are interested in asvs-checklist are comparing it to the libraries listed below
- Security checks for http headers and cookies☆24Updated 4 years ago
- AWS Security Checks☆36Updated 7 years ago
- ☆14Updated 2 years ago
- A Burp plugin to export findings to DefectDojo☆30Updated last year
- Dependency Combobulator☆89Updated last year
- Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. …☆61Updated 7 months ago
- ☆17Updated 2 years ago
- Orchestron is an Application Vulnerability Management and Correlation Tool.Orchestron helps you solve one key problem "Find and fix vulne…☆31Updated 2 years ago
- GCP GOAT is the vulnerable application for learn the GCP Security☆63Updated last year
- InfoSec OpenAI Examples☆19Updated last year
- DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider☆138Updated 3 years ago
- ☆90Updated 3 years ago
- Semgrep rules corresponding to the OWASP ASVS standard☆27Updated 4 years ago
- ☆34Updated 4 years ago
- ☆109Updated last year
- A very vulnerable implementation of a GraphQL API.☆59Updated 3 years ago
- A colorful cross-platform python script to test misconfigurations of AWS S3 buckets both through authenticated and unauthenticated checks…☆39Updated 3 years ago
- Virtual Security Operations Center☆50Updated last year
- ☆122Updated last year
- 🖇️ STRIDE vs. ASVS equivalence table☆75Updated 5 months ago
- Enhanced fork with logging, OpenAPI 3.0 and Python 3 for security monitoring workshops☆42Updated last year
- ☆23Updated 3 years ago
- ☆32Updated 2 years ago
- ☆36Updated 3 years ago
- The Pixi module is a MEAN Stack web app with wildly insecure APIs!☆120Updated 2 years ago
- Maturity Model Collaborative project☆14Updated last year
- Jumpstart multiple WebSocket servers quickly☆31Updated 3 years ago
- A custom built DNS bruteforcer with multi-threading, and handling of bad resolvers.☆57Updated 2 years ago
- Performing automated scan using Burp Suite Pro & Vmware Burp Rest API☆49Updated 2 years ago
- Target practice for ffuf☆61Updated 3 years ago