application-security

There are 46 repositories under application-security topic.

OWASP / CheatSheetSeries
The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
application-security appsec best-practices cheatsheets code owasp security
Language:Python 26682
juice-shop
juice-shop / juice-shop
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
24pullrequests application-security appsec ctf hacking hacktoberfest javascript owasp owasp-top-10 owasp-top-ten pentesting security vulnapp vulnerable
Language:TypeScript 9615
wstg
OWASP / wstg
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
best-practices guide owasp bugbounty penetration-testing pentesting application-security security hacktoberfest appsec hacking
Language:Dockerfile 6757
paragonie / awesome-appsec
A curated list of resources for learning about application security
security-experts reading-list curated application-security security owasp
Language:PHP 6123
urbanadventurer / WhatWeb
Next generation web scanner
security web scanner ruby penetration-testing kali-linux owasp penetration-testing-tools penetration-test hacking hacking-tools network-security recon appsec application-security pentesting pentesting-tools pentest web-hacking security-tools
Language:Ruby 5128
jassics / security-study-plan
Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...
aws-security study-guide study-plan appsec appsec-tutorials azure-security devsecops-university gcp-security pentesting application-security cybersecurity cybersecurity-education infosec security-testing study-planner api-security
4126
payloadbox / command-injection-payload-list
🎯 Command Injection Payload List
command-injection injection security-vulnerability vulnerability payload-list payload os-injection command os unix linux windows macos application application-security bugbounty security security-research vulnerability-research security-testing
2672
ComplianceAsCode / content
Security automation content in SCAP, Bash, Ansible, and other formats
security compliance scap xccdf oval cpe cce usgcb pci-dss ospp stig application-security security-tools security-hardening security-automation security-profile hardening information-security cybersecurity ansible
Language:Shell 2093
s4n7h0 / xvwa
XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.
xvwa php application-security learning-appsec vulnerability knowledge mysql
Language:PHP 1663
metlo-labs / metlo
Metlo is an open-source API security platform.
security api-gateway api-security application-security cybersecurity monitoring vulnerabilities vulnerability-detection metlo infosec api-pentest aws bugbounty bugbounty-tools infosectools pentest
Language:TypeScript 1568
learn365
harsh-bothra / learn365
This repository is about @harshbothra_'s 365 days of Learning Tweets & Mindmaps collection.
bugbounty community infosec vulnerabilities bugbountytips pentesting pentesting-tools learning application-security
1526
awesome-devsecops
TaptuIT / awesome-devsecops
Curating the best DevSecOps resources and tooling.
application-security devops devsecops secure-software-development awesome-list awesome hacktoberfest
1262
Janusec / janusec
JANUSEC Application Gateway provides secure access, including reverse proxy, K8S Ingress Controller, Automatic ACME Certificate, WAF, 5-Second Shield, CC Defense, OAuth2 Authentication, Global Server Load Balance, and Cookie Compliance etc. JANUSEC应用网关，提供安全的接入，包括反向代理、K8S Ingress Controller、自动化ACME证书、WAF、5秒盾、CC防御、OAuth2身份认证、GSLB负载均衡与Cookie合规等。
waf web-application-firewall application-gateway load-balance gateway application-security golang security web-application-security sql-injection janusec-application-gateway web-ssh janusec port-forwarding acme k8s-ingress-controller cookie-banner gslb cookie-compliance
Language:Go 1109
sh4hin / Androl4b
A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
mobile-security android malware-analyzer penetration-testing reverse-engineering application-security
1071
guardrailsio / awesome-php-security
Awesome PHP Security Resources 🕶🐘🔐
application-security awesome awesome-list devsecops php security security-tools
927
bloodzer0 / ossa
Open-Source Security Architecture | 开源安全架构
security security-vulnerability security-tools security-audit security-scanner ids ips business-security application-security code-audit vulnerabilities vulnerability-scanners
924
breaking-and-pwning-apps-and-servers-aws-azure-training
appsecco / breaking-and-pwning-apps-and-servers-aws-azure-training
Course content, lab setup instructions and documentation of our very popular Breaking and Pwning Apps and Servers on AWS and Azure hands on training!
aws-security pentesting penetration-testing azure-security application-security opensource free
Language:CSS 918
Quitten / Autorize
Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests
authorization authorization-enforcement burpsuite burp-plugin jython application-security
Language:Python 887
olacabs / jackhammer
Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.
security-vulnerability-assessment vulnerability-management static-code-analysis mobile-security webappsec wordpress-security network-security security-scanner security dynamic-analysis source-code-analysis penetration-testing penetration-testing-framework application-security vulnerability-scanners vulnerability-scanning vulnerability-assessment
Language:Java 716
wallarm / awesome-nginx-security
🔥 A curated list of awesome links related to application security related to the environments with NGINX or Kubernetes Ingres Controller (based on NGINX)
nginx modsecurity waf naxsi awesome-list awesome-lists security webserver load-balancer nginx-security nginx-server mod-security nginx-environment nginx-configuration kubernetes application-security api-security apigateway
695
openappsec / openappsec
open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.
api-security application-security kubernetes nginx web-application-firewall appsec devsecops kong rate-limiting security-tools threat-prevention waf owasp owasp-top-ten nginx-proxy-manager
Language:C++ 683
Anof-cyber / Application-Security
Resources for Application Security including Web, API, Android, iOS and Thick Client
android application-security appsec bugbounty cybersecurity hacking infosec penetration-testing penetration-testing-notes pentesting security security-testing
634
rewanthtammana / Damn-Vulnerable-Bank
Damn Vulnerable Bank is designed to be an intentionally vulnerable android application. This provides an interface to assess your android application security hacking skills.
security android vulnerable-android-apps infosec hacking pentesting android-security application-security vulnerable-application damn-vulnerable-bank hacktoberfest
Language:Java 610
security-prince / Application-Security-Engineer-Interview-Questions
Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exhaustive list but i felt these questions were important to be asked and some were challenging to answer
security-engineer-interview webappsec appsec devsecops infosec application-security vulnerability sdlc xss interview-questions security-team websecurity websec websecurity-reference security-engineering
608
brcyrr / PracticalCyberSecurityResources
This repository contains a curated list of resources I suggest on LinkedIn and Twitter.📝🌝
cybersecurity devsecops infosec pentesting certification application-security codereview
589
MattKeeley / Spoofy
Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records.
application-security appsec cybersecurity deliverability dmarc email-security emails infosec penetration-testing penetration-testing-tools pentesting python3 redteam security spf phishing python
Language:Python 545
Awesome-Android-Reverse-Engineering
user1342 / Awesome-Android-Reverse-Engineering
A curated list of awesome Android Reverse Engineering training, resources, and tools.
android application-security awesome awesome-list crackmes ctfs malware-analysis reverse-engineering tools training mobsec
538
uuWAF
Safe3 / uuWAF
A industry-leading free, high-performance, AI and semantic technology web application and API security protection product - uuWAF. 一款工业级免费、高性能、高扩展，支持AI和语义引擎的Web应用和API安全防护产品-南墙。Web应用防火墙、WAF、WAAP
waf application-security web-application-firewall modsecurity web-security-gateway api-gateway api-security waap security uuwaf ddos http-flood owasp
Language:C 515
payloadbox / rfi-lfi-payload-list
🎯 RFI/LFI Payload List
rfi lfi rfi-exploiton lfi-exploitation lfi-vulnerability rfi-vulnerabillity websecurity appsec application-security web-application-security payload payloads payload-list bugbounty bug-bounty security security-research security-researcher security-researchers web-hacking
508
enkomio / Taipan
Web application vulnerability scanner
security-tools security-scanner security-automation web-security application-security security security-audit security-testing hacking-tool taipan hacking web web-application web-sec-scanner web-security-research
454
Cy-clon3 / awesome-ios-security
A curated list of awesome iOS application security resources.
application-security awesome awesome-list cybersecurity ios pentesting security
434
paragonie / airship
Secure Content Management for the Modern Web - "The sky is only the beginning"
cms-airship libsodium php content-management secure security postgresql application-security cms free-software secure-by-default
Language:PHP 419
SmileZXLee / ZXHookDetection
【iOS应用安全、安全攻防】hook及越狱的基本防护与检测(动态库注入检测、hook检测与防护、越狱检测、签名校验、IDA反编译分析加密协议Demo)；【数据传输安全】浅谈http、https与数据加密
application-security defend detection hook ios-security
Language:Objective-C 419
lukeFalsina / Grab-n-Run
Grab’n Run, a simple and effective Java Library for Android projects to secure dynamic code loading.
android-application java android-development signature-verification application-security dynamic
Language:Java 415
flipkart-incubator / watchdog
Watchdog - A Comprehensive Security Scanning and a Vulnerability Management Tool.
security-tools security security-vulnerability security-testing vulnerability-management vulnerability-assessment pentest-tool penetration-testing-framework cve-databases cve-search application-security network-security product-security bugbounty
Language:Python 407
juice-shop-ctf
juice-shop / juice-shop-ctf
Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF
owasp ctf ctfd application-security capture-the-flag pentesting hacking owasp-juice-shop ctfd-database ctfd-setup hacktoberfest 24pullrequests fbctf ctf-frameworks rtb facebook-ctf rootthebox
Language:JavaScript 395

application-security

OWASP / CheatSheetSeries

juice-shop / juice-shop

OWASP / wstg

paragonie / awesome-appsec

urbanadventurer / WhatWeb

jassics / security-study-plan

payloadbox / command-injection-payload-list

ComplianceAsCode / content

s4n7h0 / xvwa

metlo-labs / metlo

harsh-bothra / learn365

TaptuIT / awesome-devsecops

Janusec / janusec

sh4hin / Androl4b

guardrailsio / awesome-php-security

bloodzer0 / ossa

appsecco / breaking-and-pwning-apps-and-servers-aws-azure-training

Quitten / Autorize

olacabs / jackhammer

wallarm / awesome-nginx-security

openappsec / openappsec

Anof-cyber / Application-Security

rewanthtammana / Damn-Vulnerable-Bank

security-prince / Application-Security-Engineer-Interview-Questions

brcyrr / PracticalCyberSecurityResources

MattKeeley / Spoofy

user1342 / Awesome-Android-Reverse-Engineering

Safe3 / uuWAF

payloadbox / rfi-lfi-payload-list

enkomio / Taipan

Cy-clon3 / awesome-ios-security

paragonie / airship

SmileZXLee / ZXHookDetection

lukeFalsina / Grab-n-Run

flipkart-incubator / watchdog

juice-shop / juice-shop-ctf