owasp

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

Automated Security Testing For REST API's

Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient http://owtf.org https://twitter.com/owtfp

OWASP ModSecurity Core Rule Set (Official Repository)

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

Maryam: Open-source Intelligence(OSINT) Framework

OWASP WEB Directory Scanner

OWASP ZSC - Shellcode/Obfuscate Code Generator

OWASP Honeypot, Automated Deception Framework.

OWASP Domain Protect - prevent subdomain takeover

🕸️ Audit tool to find common vulnerabilities in PHP source code

The DevSecOps toolset for REST APIs

File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.

A simple tool for interacting with OWASP ZAP from the commandline.

Erlik 2 - Vulnerable-Flask-App

Erlik - Vulnerable Soap Service

BoB Web Application Security Project

Creates CycloneDX Software Bill of Materials (SBOM) from Python projects and environments.

Framework for Testing WAFs (FTW!)

Software Component Verification Standard (SCVS)