A curated list of resources for learning about application security
-
Updated
May 5, 2020 - PHP
#
application-security
Here are 79 public repositories matching this topic...
Next generation web scanner
ruby
security
web
scanner
hacking
owasp
penetration-testing
application-security
pentesting
recon
pentest
kali-linux
appsec
network-security
web-hacking
security-tools
penetration-test
hacking-tools
pentesting-tools
penetration-testing-tools
-
Updated
May 31, 2020 - Ruby
XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.
-
Updated
Jul 1, 2019 - PHP
kingthorin
commented
Apr 2, 2020
Merge /Testing_for_Vertical_Bypassing_Authorization_Schema_WSTG-AUTHZ-00X.md into 4-Web_Application_Security_Testing/05-Authorization_Testing/03-Testing_for_Privilege_Escalation.md
10
kclinden
commented
Apr 11, 2019
Description of problem:
I have never written SCAP content before, and am looking at how to get started. I would like to write SCAP content to test compliance on Photon OS against DISA SRGs. I have been all over the wiki pages, but I am still not sure how to get started. The main page makes it look super easy for writing OVAL and XCCDF files using YAML, but I am not sure where to build those
A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
android
reverse-engineering
penetration-testing
application-security
malware-analyzer
mobile-security
-
Updated
Oct 1, 2019
Open-Source Security Architecture | 开源安全架构
security
security-audit
ids
application-security
security-vulnerability
vulnerabilities
ips
vulnerability-scanners
security-scanner
security-tools
code-audit
business-security
-
Updated
Nov 18, 2019
Janusec Application Gateway, an application security solution which provides WAF (Web Application Firewall), CC attack defense, LDAP or OAuth2 Authentication, private key protection, Web SSH operation, Web routing and scalable load balancing. JANUSEC应用网关，提供WAF、CC攻击防御、LDAP或OAuth2身份认证、统一Web化管理入口、证书私钥保护、Web SSH安全运维，Web路由以及可扩展的负载均衡等功能。
go
golang
security
gateway
waf
xss
reverse-proxy
sql-injection
application-security
web-application-firewall
web-console
web-application-security
web-ssh
application-gateway
load-balance
cc-attack-defense
sensitive-data-leakage
janusec-application-gateway
-
Updated
May 23, 2020 - Go
Course content, lab setup instructions and documentation of our very popular Breaking and Pwning Apps and Servers on AWS and Azure hands on training!
-
Updated
Jun 2, 2020 - CSS
Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.
security
static-code-analysis
penetration-testing
dynamic-analysis
application-security
wordpress-security
mobile-security
vulnerability-management
vulnerability-scanners
security-scanner
vulnerability-assessment
network-security
webappsec
vulnerability-scanning
source-code-analysis
penetration-testing-framework
security-vulnerability-assessment
-
Updated
Apr 22, 2019 - Java
Awesome PHP Security Resources 🕶 🐘 🔐
-
Updated
Mar 9, 2019
windows
macos
linux
security
application
unix
command
os
injection
vulnerability
application-security
security-vulnerability
bugbounty
payload
command-injection
security-testing
security-research
vulnerability-research
payload-list
os-injection
-
Updated
Jan 2, 2020
paragonie-scott
commented
Nov 6, 2016
Post feature requests here. Backwards compatibility is optional.
Grab’n Run, a simple and effective Java Library for Android projects to secure dynamic code loading.
-
Updated
May 24, 2016 - Java
Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests
-
Updated
Mar 16, 2020 - Python
Web application vulnerability scanner
security
security-audit
web
hacking
web-application
application-security
web-security
hacking-tool
security-scanner
security-automation
security-tools
web-security-research
web-sec-scanner
security-testing
taipan
-
Updated
Apr 13, 2020
Watchdog - A Comprehensive Security Scanning and a Vulnerability Management Tool.
security
application-security
security-vulnerability
bugbounty
vulnerability-management
vulnerability-assessment
network-security
security-tools
pentest-tool
security-testing
penetration-testing-framework
cve-search
cve-databases
product-security
-
Updated
Jul 18, 2018 - Python
Fast Advanced Spam Analysis Tool
python
docker
security
ansible
ansible-playbook
docker-image
smtp
outlook
application-security
mail-analyzer
spam-analyzer
streamparse
apache-storm
dialect
spamscope
-
Updated
Apr 16, 2020 - Python
Capture-the-Flag (CTF) environment setup tools for OWASP Juice Shop
hacking
owasp
application-security
pentesting
ctf
capture-the-flag
ctfd
owasp-juice-shop
ctfd-database
ctfd-setup
-
Updated
May 24, 2020 - JavaScript
【iOS应用安全、安全攻防】hook及越狱的基本防护与检测(动态库注入检测、hook检测与防护、越狱检测、签名校验、IDA反编译分析加密协议示例)
-
Updated
Dec 25, 2019 - Objective-C
Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exhaustive list but i felt these questions were important to be asked and some were challenging to answer
xss
vulnerability
infosec
application-security
interview-questions
appsec
webappsec
sdlc
devsecops
security-engineer-interview
-
Updated
May 4, 2020
An open source Android application that is intentionally vulnerable so as to act as a learning platform for Android application security beginners.
mobile-app
application-security
pentesting
android-app
android-security
mobile-security
vulnerable
ctf-platform
ctf-challenges
android-ctf
android-pentest
mobile-pentest
mobile-ctf
android-application-vulnerabilities
android-labs
-
Updated
Dec 18, 2019 - CMake
A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestration
-
Updated
May 6, 2020 - HTML
security
bug-bounty
application-security
bugbounty
appsec
payload
payloads
lfi
rfi
web-hacking
websecurity
web-application-security
security-research
security-researcher
lfi-exploitation
payload-list
lfi-vulnerability
security-researchers
rfi-exploiton
rfi-vulnerabillity
-
Updated
Jan 9, 2020
ScriptGod1337
commented
Oct 21, 2019
Referring to issue #126 I open this minor issue:
Having long strings in requirements view table is causing incorrect rendering of the table:
horizontal scrollbar should be visible but are not available.
Changing the zoom of the browser can be used as a workaround
A Continuous Threat Modeling methodology
-
Updated
Oct 14, 2019
Tool for breaking into web applications.
-
Updated
Aug 16, 2019 - Python
VyAPI - A cloud based vulnerable hybrid Android App
-
Updated
Feb 21, 2020 - Java
Repository for all the workshop content delivered at nullcon X on 1st of March 2019
-
Updated
Apr 4, 2019 - CSS
Improve this page
Add a description, image, and links to the application-security topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the application-security topic, visit your repo's landing page and select "manage topics."
Maybe forging an event emission for a challenge that does not really exist but make the client pick it up nonetheless?
Want to back this issue? Post a bounty on it! We accept bounties via [Bount