The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
-
Updated
Sep 13, 2025 - Python
#
owasp
Here are 935 public repositories matching this topic...
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
rest static-analysis apk owasp dynamic-analysis web-security malware-analysis mobsf android-security mobile-security windows-mobile-security ios-security api-testing cwe devsecops runtime-security mstg masvs mastg
-
Updated
Sep 7, 2025 - JavaScript
A collection of hacking / penetration testing resources to make you better!
exploit reverse-engineering malware mitm hacking owasp penetration-testing ctf privilege-escalation buffer-overflow windows-privilege-escalation privilege-escalation-linux
-
Updated
Mar 12, 2024
In-depth attack surface mapping and asset discovery
go dns golang osint owasp subdomain enumeration recon maltego network-security information-gathering osint-reconnaissance attack-surfaces
-
Updated
Sep 4, 2025 - Go
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
javascript security hacking owasp application-security pentesting ctf vulnerable appsec hacktoberfest owasp-top-10 owasp-top-ten 24pullrequests vulnapp
-
Updated
Sep 16, 2025 - TypeScript
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
security guide best-practices hacking owasp penetration-testing application-security pentesting bugbounty appsec hacktoberfest
-
Updated
Sep 4, 2025 - Dockerfile
A curated list of resources for learning about application security
-
Updated
Feb 22, 2025 - PHP
A list of web application security
security scanner hacking owasp penetration-testing vulnerability web-security pentesting vulnerabilities appsec metasploit web-hacking hacking-tools
-
Updated
May 27, 2025
Next generation web scanner
ruby security web scanner hacking owasp penetration-testing application-security pentesting recon pentest kali-linux appsec network-security web-hacking security-tools penetration-test hacking-tools pentesting-tools penetration-testing-tools
-
Updated
Aug 25, 2025 - Ruby
Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀
docker kubernetes infrastructure security container hacking owasp k8s cloud-native pentesting blueteam cloudsecurity devsecops cloud-security redteam container-security vulnerable-app kubernetes-security kubernetes-goat
-
Updated
May 27, 2025 - HTML
Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
python security automation scanner bruteforce owasp penetration-testing pentesting recon cve vulnerability-management vulnerability-scanners network-security information-gathering portscanner security-tools vulnerability-scanner penetration-testing-framework hacking-tools pentesting-tools
-
Updated
Sep 14, 2025 - Python
Open-Source Unified Vulnerability Management, DevSecOps & ASPM
python kubernetes security automation django analytics owasp vulnerability-databases appsec vulnerability-management hacktoberfest security-orchestration security-automation devsecops vulnerability-correlation
-
Updated
Sep 17, 2025 - HTML
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
security owasp bom vulnerabilities appsec component-analysis nvd vulnerability-detection hacktoberfest sca software-security security-automation devsecops software-composition-analysis bill-of-materials ossindex purl package-url sbom cyclonedx
-
Updated
Sep 17, 2025 - Java
CISO Assistant is a one-stop-shop for GRC, covering Risk, AppSec, Compliance/Audit Management, Privacy and supporting +100 frameworks worldwide with auto-mapping: NIST CSF, ISO 27001, SOC2, CIS, PCI DSS, NIS2, CMMC, PSPF, GDPR, HIPAA, Essential Eight, NYDFS-500, DORA, NIST AI RMF, 800-53, CyFun, AirCyber, NCSC, ECC, SCF and so much more
security nist cis privacy mcp audit owasp cybersecurity compliance grc quantification dora isms gdpr risk-management iso27001 bsi soc2 ebios-rm nis2
-
Updated
Sep 17, 2025 - Python
OWASP Coraza WAF is a golang modsecurity compatible web application firewall library
go golang http waf owasp modsecurity hacktoberfest web-application-firewall coraza coraza-waf owasp-crs coreruleset
-
Updated
Sep 17, 2025 - Go
Awesome Node.js Security resources
-
Updated
Sep 10, 2025
😎 🔗 Awesome list about all kinds of resources for learning Ethical Hacking and Penetration Testing.
awesome hacking resources owasp penetration-testing awesome-list ctf hacktoberfest ethical-hacking web-hacking vulnerable-applications learning-hacking hacking-resources
-
Updated
Dec 15, 2024
Automated Security Testing For REST API's
python security owasp ci-cd penetration-testing postman-collection sdlc security-automation penetration-testing-framework restapiautomation
-
Updated
Jun 5, 2024 - Python
Improve this page
Add a description, image, and links to the owasp topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the owasp topic, visit your repo's landing page and select "manage topics."