owasp · GitHub Topics

OWASP / CheatSheetSeries

OWASP组织创建的安全速查表，目标是帮助阅读者构建更加安全的应用程序

owasp Code 安全 cheatsheets best-practices appsec application-security

Python 29.71 k

3 天前

MobSF / Mobile-Security-Framework-MobSF

MobSF （移动端安全框架）是一个自动化的移动端应用程序(Android/iOS/Windows)安全问题检出的框架和工具，可以进行静态和动态分析的渗透测试，恶意软件分析和安全评估

static-analysis dynamic-analysis mobsf android-security mobile-security windows-mobile-security ios-security api-testing web-security malware-analysis runtime-security devsecops apk REST API cwe owasp mstg masvs mastg

JavaScript 18.8 k

6 天前

vitalysim / Awesome-Hacking-Resources

#夺旗赛 (CTF) 和网络安全资源#A collection of hacking / penetration testing resources to make you better!

ctf Hacking privilege-escalation 逆向工程 buffer-overflow penetration-testing owasp Exploit Malware windows-privilege-escalation mitm

15.98 k

1 年前

owasp-amass / amass

In-depth attack surface mapping and asset discovery

Go dns subdomain enumeration Reconnaissance OSINT osint-reconnaissance network-security owasp maltego attack-surfaces information-gathering

Go 13.12 k

1 天前

juice-shop / juice-shop

#夺旗赛 (CTF) 和网络安全资源#OWASP Juice Shop：可能是最不安全的现代化，复杂的网站。用于漏洞学习目的，包含多种热门安全漏洞。

owasp JavaScript vulnerable Hacking application-security owasp-top-10 owasp-top-ten pentesting vulnapp appsec ctf Hacktoberfest 24pullrequests 安全

TypeScript 11.34 k

2 天前

OWASP / wstg

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

best-practices guide owasp Bug Bounty penetration-testing pentesting application-security 安全 Hacktoberfest appsec Hacking

Dockerfile 8.04 k

9 天前

paragonie / awesome-appsec

A curated list of resources for learning about application security

security-experts reading-list curated application-security 安全 owasp

PHP 6.55 k

4 个月前

infoslack / awesome-web-hacking

A list of web application security

penetration-testing web-hacking vulnerabilities scanner Hacking hacking-tools metasploit web-security appsec owasp pentesting 安全 vulnerability

6.25 k

19 天前

urbanadventurer / WhatWeb

Next generation web scanner

安全 Web scanner Ruby penetration-testing kali-linux owasp penetration-testing-tools penetration-test Hacking hacking-tools network-security Reconnaissance appsec application-security pentesting pentesting-tools pentest web-hacking

Ruby 5.92 k

1 年前

madhuakula / kubernetes-goat

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

Kubernetes vulnerable-app 安全 Hacking pentesting infrastructure cloud-security Docker container kubernetes-goat devsecops cloudsecurity kubernetes-security container-security owasp cloud-native blueteam redteam

HTML 4.81 k

19 天前

OWASP / Nettacker

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

Python penetration-testing penetration-testing-framework owasp 自动化 portscanner vulnerability-scanners information-gathering bruteforce 安全 scanner pentesting Common Vulnerabilities and Exposures (CVE)hacking-tools pentesting-tools vulnerability-scanner vulnerability-management network-security Reconnaissance

Python 4.2 k

4 天前

DefectDojo / django-DefectDojo

DevSecOps, ASPM, Vulnerability Management. All on one platform.

Python vulnerability-databases Django 安全 owasp analytics vulnerability-management 自动化 security-automation security-orchestration devsecops vulnerability-correlation Kubernetes Hacktoberfest appsec

HTML 4.07 k

2 天前

microcosm-cc / bluemonday

bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS

Sanitization HTML 安全 xss Go owasp allowlist

Go 3.41 k

2 个月前

DependencyTrack / dependency-track

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Java 3.1 k

1 天前

intuitem / ciso-assistant-community

CISO Assistant is a one-stop-shop for GRC, covering Risk, AppSec, Compliance/Audit Management, Privacy and supporting +90 frameworks worldwide with auto-mapping: NIST CSF, ISO 27001, SOC2, CIS, PCI DS...

compliance grc soc2 gdpr audit iso27001 cis dora risk-management owasp nist 隐私 fedramp bsi Cybersecurity isms ebios-rm nis2 安全 mcp

Python 2.97 k

3 天前

lirantal / awesome-nodejs-security

Awesome Node.js Security resources

Node.js 安全 Cybersecurity web-security owasp vulnerabilities pentest Hacktoberfest

2.83 k

1 个月前

husnainfareed / awesome-ethical-hacking-resources

#Awesome#😎 🔗 Awesome list about all kinds of resources for learning Ethical Hacking and Penetration Testing.

penetration-testing Hacking web-hacking Hackathon-Kit Hacktoberfest Awesome Lists ctf owasp ethical-hacking

2.76 k

6 个月前

corazawaf / coraza

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library

waf modsecurity owasp Go HTTP web-application-firewall Hacktoberfest

Go 2.69 k

4 天前

coreruleset / coreruleset

OWASP CRS (Official Repository)

安全 ruleset owasp crs waf

Python 2.62 k

6 天前

flipkart-incubator / Astra

Automated Security Testing For REST API's

安全 Python owasp penetration-testing-framework postman-collection CI/CD penetration-testing security-automation

Python 2.58 k

1 年前