owasp-top-10

There are 15 repositories under owasp-top-10 topic.

juice-shop
juice-shop / juice-shop
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
owasp javascript vulnerable hacking application-security owasp-top-10 owasp-top-ten pentesting vulnapp appsec ctf hacktoberfest 24pullrequests security
Language:TypeScript 9614
payloadbox / sql-injection-payload-list
🎯 SQL Injection Payload List
sql-injection attacker sql-injection-attacks sql-injection-proof sql-injection-exploitation sql-injections sql-injection-payloads injection-payloads sql-injection-filterer sql-injection-attack owasp-top-10 payloads payload websecurity bugbounty security-research hacking sql-inject injection-attacks injection
4393
xalgord / Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes
bugbounty resources hacking owasp owasp-top-10 bug-bounty bugbountytips xalgord collection ethical-hacking
1192
webpwnized / mutillidae
OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. This is an easy-to-use web hacking environment designed for labs, security enthusiasts, classrooms, CTF, and vulnerability assessment tool targets.
security owasp owasp-top-10 cybersecurity training web application top 10 appsec penetration-testing
Language:PHP 1182
vapi
roottusk / vapi
vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios through Exercises.
owasp api apitop10 owasp-top-10 owasp-top-ten vulnerable-application appsec appsec-tutorials bugbounty hacktoberfest docker cors php postman hacktoberfest-accepted exercises
Language:HTML 1116
globocom / secDevLabs
A laboratory for learning secure web and mobile development in a practical manner.
owasp-top-10 labs development training security vulnerability hacktoberfest hacktoberfest2022
Language:PHP 869
akto-api-security / akto
Proactive, Open source API security → API discovery, Testing in CI/CD, Test Library with 150+ Tests, Add custom tests, Sensitive data exposure
api-security api-discovery api-security-testing api-testing authentication authorization devsecops idor owasp-top-10 security security-testing sensitive-data-exposure threat-detection hacktoberfest hacktoberfest2023 devsecops-pipeline
Language:Java 839
Zeyad-Azima / Offensive-Resources
A Huge Learning Resources with Labs For Offensive Security Players
api infrastructure learning security mobile web hack hacking owasp cybersecurity web-security mobile-security offensive offensive-security red-team owasp-top-10 redteam cloud-security api-security red-teaming
836
appsecco / dvna
Damn Vulnerable NodeJS Application
dvna hack nodejs owasp owasp-top-10 security testing vulnerable vulnerable-apps
Language:SCSS 666
OWASP / iGoat-Swift
OWASP iGoat (Swift) - A Damn Vulnerable Swift Application for iOS
ios-security runtime-security insecure-data-storage ipa owasp-igoat owasp-top-10 ios-swift
Language:C 392
bmarsh9 / gapps
Security compliance platform - SOC2, CMMC, ASVS, ISO27001, HIPAA, NIST CSF, NIST 800-53, CSC CIS 18, PCI DSS, SSF tracking. https://gapps.darkbanner.com
compliance security soc2 grc cmmc 27002 iso27001 nist hipaa nist-csf nist800-53 asvs owasp owasp-top-10 csc pci pci-dss cis18
Language:HTML 347
ghostery / local-sheriff
Think of Local sheriff as a recon tool in your browser (WebExtension). While you normally browse the internet, Local Sheriff works in the background to empower you in identifying what data points (PII) are being shared / leaked to which all third-parties.
privacy-tools gdpr-checklist web-extension owasp-top-10 data-leakage sensitive-data-exposure
Language:JavaScript 303
aws-firewall-factory
globaldatanet / aws-firewall-factory
Easily improve the security of your web applications with aws firewall factory. Protect your valuable assets with seamless WAF deployment, updates, and staging, all efficiently managed centrally with Firewall Manager.
aws firewall governance waf typescript cdk amazon-web-services devsecops owasp security hacktoberfest owasp-top-10 wafv2
Language:TypeScript 221
ivan-sincek / forbidden
Bypass 4xx HTTP response status codes and more. Based on PycURL and Python Requests.
ethical-hacking offensive-security penetration-testing security web web-penetration-testing bug-bounty 401 403 brute-force bypass curl open-redirect owasp-top-10 python red-team-engagement fuzzing broken-access-controls pycurl python-requests
Language:Python 220
akto-api-security / 30-API-security-tests
🚀 Join us for 30days of daily API security tests. #30days30tests We've spent last 120days building amazing API security tests for the community. Next 30 days we will post test tutorials here.
bola owasp-top-10 security testing
198
OWASP / ASST
OWASP ASST (Automated Software Security Toolkit) | A Novel Open Source Web Security Scanner.
asst web-vulnerability-scanners cybersecurity owasp-top-10 owasp vulnerability-scanners web-vulnerability-scanner vulnerability-detection vulnerability-scanner vulnerability-assessment security-assesment-security-tools security-assessments security-audit security-hardening security-testing
Language:JavaScript 152
yevh / VulnPlanet
Vulnerable code snippets with fixes for Web2, Web3, API, iOS, Android and Infrastructure-as-Code (IaC)
application-security appsec-tutorials code codesecurity security android api appsecurity bugbounty ios owasp owasp-top-10 pentesting web2 web3 cve poc vulnerabilities vulnerability waf
149
moeinfatehi / Backup-Finder
A burp suite extension that reviews backup, old, temporary and unreferenced files on web server for sensitive information (OWASP WSTG-CONF-04, OTG-CONFIG-004)
application-security appsecurity backupfinder burp burp-extensions burpsuite burpsuite-extender data-leakage owasp owasp-top-10 owasp-top-ten penetration-testing pentesting portswigger sensitive-data-exposure
Language:Java 148
moeinfatehi / Admin-Panel_Finder
A burp suite extension that enumerates infrastructure and application admin interfaces (OTG-CONFIG-005)
admin-dashboard-finder admin-finder admin-login-finder admin-login-scanner admin-page-finder admin-panel-finder adminpanelfinder application-security burp-extensions burpsuite burpsuite-extender data-leakage find-admin okadminfinder owasp owasp-top-10 owasp-top-ten penetration-testing sensitive-data-exposure sensitive-data-leakage
Language:Java 116
hellosatish / microservice-patterns
Code to share the knowledge I gained while designing and implementing micro services
api-sec event-driven golang kafka-streams microservices microservices-architecture owasp-top-10 security service-discovery spring-boot swagger-ui
Language:Java 114
dipakpanchal05 / CVE-2022-23808
phpMyAdmin XSS
zeroday xss exploit exploitation phpmyadmin database cross-site-scripting vulnerability bugbounty redteam redteaming pentesting hacking poc owasp owasp-top-10 infosec
112
moeinfatehi / xss_vulnerability_challenges
this repository is a docker containing some "XSS vulnerability" challenges and bypass examples.
application-security appsecurity cross-site-scripting infosec input-validation owasp owasp-top-10 owasp-top-ten penetration-testing pentesting xss xss-attacks xss-detection xss-exploitation xss-filter xss-vulnerability
Language:PHP 112
andifalk / reactive-spring-security-5-workshop
Hands-On workshop for securing a reactive spring boot 2 application in multiple steps
spring-boot spring spring-security workshop spring-mvc oauth2 openid-connect reactive-streams spring-webflux owasp-top-10
Language:Java 108
appsecco / sqlinjection-training-app
A simple PHP application to learn SQL Injection detection and exploitation techniques.
vulnerable-apps owasp-top-10 sql-injection exploit appsec training-app web-security application-security vulnerable-web-app owasp-top-ten
Language:PHP 94
deeptracy
BBVA / deeptracy
The Security Dependency Orchestrator Service
dependencies dependency devsecops owasp owasp-top-10 patton secdevops security-tools
Language:Python 88
sh3bu / Portswigger_labs
This repository contains my writeups for the labs in PortSwigger's Web Security Academy platform. Each lab writeup includes the lab's name, description, and my step-by-step solution, as well as any additional notes or observations.
owasp-top-10 portswigger-labs websecurity writeups
75
abunuwas / fencer
Automated API security testing
api api-security api-security-testing jwt security sql-injection openapi owasp-top-10 testing graphql oauth2 rest-api
Language:Python 67
www-project-top-10-low-code-no-code-security-risks
OWASP / www-project-top-10-low-code-no-code-security-risks
OWASP Low-Code/No-Code Top 10
appsec cybersecurity infosec lowcode nocode owasp owasp-top-10 security
Language:HTML 62
snsttr / diwa
A Deliberately Insecure Web Application
hacking security security-threats webappsec infosec owasp-top-10 education training learn practice web-security xss sql-injection csrf session-hijacking session-fixation path-traversal sensitive-data-exposure brute-force-attacks local-file-inclusion
Language:PHP 59
OWASP / www-project-machine-learning-security-top-10
OWASP Machine Learning Security Top 10 Project
ml mlops mlsec owasp owasp-top-10 ai appsec mlai mlsecops mlsecurity top10
Language:HTML 58
ossamayasserr / WebAppPentestRoadmap
Roadmap for Web Application Penetration Testing | FREE Resources (Not Pirated)
burpsuite information-security owasp-top-10 penetration-testing pentest roadmap security web-security tryhackme portswigger
Language:Python 52
Aju100 / VulWebaju
VulWebaju is a platform that automates setting up your pen-testing environment for learning purposes.
bugbounty hacking hacktoberfest owasp-top-10 penetration-testing pentesting
Language:Shell 50
lmoroz / bWAPP
bWAPP latest modified for PHP7 bundled with Docker container
bwapp owasp owasp-top-10 pentesting security-vulnerability
Language:PHP 43
twseptian / bug-bounty-testing-essential-guideline-startup-bug-hunters
Bug Bounty Testing Essential Guideline : Startup Bug Hunters
bug bugbountytips bugbounty-writeups bugbountytricks owasp-top-10 owasp pentesting bugbounty-reports
39
zAbuQasem / MyNotes
My notes from courses,books ..etc
penetration-testing notes red-team active-directory owasp-top-10 web-penetration-testing cheatsheet
39
nearform / owasp-top-ten-workshop
NearForm OWASP Top Ten Security Vulnerabilities Workshop
owasp-top-10 security workshop
Language:JavaScript 37

owasp-top-10

juice-shop / juice-shop

payloadbox / sql-injection-payload-list

xalgord / Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes

webpwnized / mutillidae

roottusk / vapi

globocom / secDevLabs

akto-api-security / akto

Zeyad-Azima / Offensive-Resources

appsecco / dvna

OWASP / iGoat-Swift

bmarsh9 / gapps

ghostery / local-sheriff

globaldatanet / aws-firewall-factory

ivan-sincek / forbidden

akto-api-security / 30-API-security-tests

OWASP / ASST

yevh / VulnPlanet

moeinfatehi / Backup-Finder

moeinfatehi / Admin-Panel_Finder

hellosatish / microservice-patterns

dipakpanchal05 / CVE-2022-23808

moeinfatehi / xss_vulnerability_challenges

andifalk / reactive-spring-security-5-workshop

appsecco / sqlinjection-training-app

BBVA / deeptracy

sh3bu / Portswigger_labs

abunuwas / fencer

OWASP / www-project-top-10-low-code-no-code-security-risks

snsttr / diwa

OWASP / www-project-machine-learning-security-top-10

ossamayasserr / WebAppPentestRoadmap

Aju100 / VulWebaju

lmoroz / bWAPP

twseptian / bug-bounty-testing-essential-guideline-startup-bug-hunters

zAbuQasem / MyNotes

nearform / owasp-top-ten-workshop