mackowski Goto Github PK

asvs

Application Security Verification Standard

awesome-nodejs-security

Awesome Node.js Security resources

awesome-web-security

🐶 A curated list of Web Security materials and resources.

blackhatpython

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

cisl

Columnstore Indexes Scripts Library

continuous-threat-modeling

A Continuous Threat Modeling methodology

ctf-katana

This repository aims to hold suggestions (and hopefully/eventually code) for CTF challenges. The "project" is nicknamed Katana.

defending-devops

Lab Material for the Two-Day Defending Modern DevOps Environments Course

django-defectdojo

DefectDojo is an open-source application vulnerability correlation and security orchestration tool.

domxsswiki

Automatically exported from code.google.com/p/domxsswiki

find-sec-bugs

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

gh-copilot

hello-world-javascript-action

juice-shop

OWASP Juice Shop is an intentionally insecure webapp for security trainings written entirely in Javascript which encompasses the entire OWASP Top Ten and other severe security flaws.

kubernetes-security-workshop

Kubernertes security workshop

lavamoat

tools for sandboxing your dependency graph

netlify

owasp-change.github.io

An Open Letter to the OWASP Board

owasp-testing-guide-v5

The OWASP Testing Guide includes a "best practice" penetration testing framework which users can implement in their own organizations and a "low level" penetration testing guide that describes techniques for testing most common web application and web service security issues.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pipelines-dotnet-core

A simple ASP.NET Core MVC app for Azure Pipelines docs

postmessage-tracker

A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon

rules-owasp-asvs

Semgrep rules corresponding to the OWASP ASVS standard

securecodebox

SecureCodeBox - continuous secure delivery out of the box

test-actions

unity-ssdlc

A public version of Unity's internal SSDLC. Meant to provide an example framework, not just to share with others, but to also take contributions and continue to improve and evolve.

web-methodology

Methodology for high-quality web application security testing - https://github.com/tprynn/web-methodology/wiki

wg-security-tooling

Security tools for open source.

www-community

OWASP Community Pages are a place where OWASP can accept community contributions for security-related content.