oshp / oshp-validatorLinks
Venom tests suite to validate an HTTP security response headers configuration against OSHP recommendation.
☆134Updated last week
Alternatives and similar repositories for oshp-validator
Users that are interested in oshp-validator are comparing it to the libraries listed below
Sorting:
- Host and manage multiple Juice Shop instances for security trainings and Capture The Flags☆297Updated this week
- The OWASP Secure Headers Project☆173Updated last week
- A Broken Application - Very Vulnerable!☆175Updated this week
- A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities. Use c{api}tal to learn, train and exploit API Sec…☆301Updated 2 months ago
- Runs a scan using Dastardly by Burp Suite against a target site and creates a JUnit XML report for the scan on completion.☆288Updated last year
- OWASP Raider: a novel framework for manipulating the HTTP processes of persistent sessions☆104Updated 2 years ago
- ☆84Updated 2 years ago
- Tool to detect and monitor GitHub org users' public repositories for secrets and sensitive files☆227Updated 4 months ago
- 🧮 An online calculator to assess the risk of web vulnerabilities based on OWASP Risk Assessment☆162Updated 4 years ago
- Docker toolbox for pentest of web based application.☆170Updated this week
- OWASP Project Developer Guide - Document and Project Web pages☆114Updated this week
- ☆124Updated last year
- Secret Magpie - Secret Detection Tool☆243Updated last year
- Find secrets in your codebase☆123Updated 7 months ago
- CLI component of OWASP PurpleTeam☆131Updated last year
- SessionProbe is a multi-threaded tool designed for penetration testing and bug bounty hunting. It evaluates user privileges in web applic…☆459Updated last year
- The OWASP Vulnerable Web Applications Directory Project (VWAD) is a comprehensive and well maintained registry of all known vulnerable we…☆66Updated this week
- A small tool to help developers understand a huge set of security requirements from appsec teams☆47Updated 3 years ago
- Core model including reused documentation☆99Updated 4 months ago
- Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently …☆310Updated last week
- OWASP Code Review Guide Web Repository☆143Updated 3 years ago
- drHEADer helps with the audit of security headers received in response to a single request or a list of requests.☆111Updated 9 months ago
- ☆113Updated 2 years ago
- An open-source collection of API key rotation tutorials.☆74Updated last month
- Web Application Security Checklist☆133Updated 6 months ago
- The Pixi module is a MEAN Stack web app with wildly insecure APIs!☆132Updated 2 years ago
- GraphQL threat framework used by security professionals to research security gaps in GraphQL implementations☆323Updated 3 months ago
- A suite of secret scanners built in Rust for performance. Based on TruffleHog (https://github.com/dxa4481/truffleHog) which is written in…☆530Updated 3 months ago
- ☆192Updated 2 years ago
- truffleproc — hunt secrets in process memory (TruffleHog & gdb mashup)☆120Updated 2 years ago