owasp

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

A collection of hacking / penetration testing resources to make you better!

The OWASP ZAP core project

In-depth Attack Surface Mapping and Asset Discovery

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

A curated list of resources for learning about application security

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

A list of web application security

Next generation web scanner

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

DefectDojo is a DevSecOps and vulnerability management tool.

bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS

Automated Security Testing For REST API's

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

Awesome Node.js Security resources

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

In-depth Attack Surface Mapping and Asset Discovery

🔗 All the resources I could find for learning Ethical Hacking and Penetration Testing.

Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14 platforms.