y-mehta

ssrf-req-filter

Module to prevent SSRF when sending requests in NodeJS. Blocks request to local and private IP addresses

vulnalerts

Get new vulnerability alerts daily straight to your slack channel using GitHub Actions.

twitter-bot

Twitter-bot is a program that integrates with the Twitter platform, automatically posting, retweeting, liking, or following other users. Twitter-bot can prove to be useful through providing interesting information or updates, and they can also be fun or humorous.

oxml_xxe

A tool for embedding XXE/XML exploits into different filetypes

anti-trojan-source

Detect trojan source attacks that employ unicode bidi attacks to inject malicious code

appsmith

Low code project to build admin panels, internal tools, and dashboards. Integrates with 15+ databases and any API.

curly-octo-carnival

domain-protect

OWASP Domain Protect - prevent subdomain takeover

learning-ansible

OSWE

OSWE Preparation

secureCodeBox

secureCodeBox (SCB) - continuous secure delivery out of the box

shell-plugins

Seamless authentication for every tool in your terminal.

sqlpad

Web-based SQL editor run in your own private cloud. Supports MySQL, Postgres, SQL Server, Vertica, Crate, ClickHouse, Trino, Presto, SAP HANA, Cassandra, Snowflake, BigQuery, SQLite, and more with ODBC

swagger-multifile-example

Example multifile OpenAPI 3.0 (OAS 3.0) specs for mobile and web applications.

ToolJet

Extensible low-code framework for building business applications. Connect to databases, cloud storages, GraphQL, API endpoints, Airtable, etc and build apps using drag and drop application builder. Built using JavaScript/TypeScript. 🚀

TorBoT

A feature rich python web crawler for Deep and Dark Web.

wstg

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

www-project-top-10-low-code-no-code-security-risks

OWASP No-Code Low-Code Security