nicoSWD / asvs-checklistLinks
OWASP Application Security Verification Standard 4.0 Checklist
☆33Updated 6 years ago
Alternatives and similar repositories for asvs-checklist
Users that are interested in asvs-checklist are comparing it to the libraries listed below
Sorting:
- AWS Security Checks☆39Updated 7 years ago
- DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider☆139Updated 3 years ago
- All-in-one tool for managing vulnerability reports from AppSec pipelines☆106Updated 2 years ago
- A very vulnerable implementation of a GraphQL API.☆61Updated 3 years ago
- Dependency Combobulator☆93Updated last year
- Monitoring GitHub for sensitive data shared publicly☆66Updated 3 years ago
- ☆35Updated 4 years ago
- Assorted tools for security-related task for git repositories☆59Updated 3 years ago
- A Burp plugin to export findings to DefectDojo☆30Updated last year
- ☆23Updated 2 years ago
- GCP GOAT is the vulnerable application for learn the GCP Security☆64Updated 2 months ago
- ☆123Updated last year
- ☆111Updated 2 years ago
- A collection of response templates for invalid bug bounty reports.☆91Updated 7 years ago
- Orchestron is an Application Vulnerability Management and Correlation Tool.Orchestron helps you solve one key problem "Find and fix vulne…☆31Updated 2 years ago
- InfoSec OpenAI Examples☆19Updated last year
- A small tool to help developers understand a huge set of security requirements from appsec teams☆46Updated 2 years ago
- Semgrep rules corresponding to the OWASP ASVS standard☆27Updated 4 years ago
- Repository for all the workshop content delivered at nullcon X on 1st of March 2019☆81Updated 6 years ago
- Interactive IPython Notebook to demonstrate OWASP ZAP's API and Scripting Functions - OWASP ZAP 2.8.0☆41Updated 2 years ago
- Scan your EC2 instance to find its vulnerabilities using Vuls (https://vuls.io/en/)☆89Updated 2 years ago
- Security checks for http headers and cookies☆25Updated 4 years ago
- This repository contains an example Python API that is vulnerable to several different web API attacks.☆70Updated last year
- Paramalyzer - Burp extension for parameter analysis of large-scale web application penetration tests.☆33Updated 2 years ago
- Fetch the details of assets hosted on AWS.☆89Updated last year
- Whitebox evaluation of effective S3 object permissions, to identify publicly accessible files.☆76Updated 3 years ago
- 🧮 An online calculator to assess the risk of web vulnerabilities based on OWASP Risk Assessment☆158Updated 3 years ago
- Monitor the internet attack surface of various public cloud environments. Currently supports AWS, GCP, Azure, DigitalOcean and Oracle Clo…☆126Updated last year
- Presentations, training modules, and other education materials from Duo Security's Application Security team.☆74Updated 4 years ago
- Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. …☆65Updated 3 weeks ago