The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
-
Updated
Oct 10, 2025 - Python
#
appsec
Here are 525 public repositories matching this topic...
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
security hackers api-gateway captcha firewall waf xss bruteforce self-hosted cybersecurity sql-injection vulnerability application-security web-security cve appsec web-application-firewall http-flood blueteam websecurity
-
Updated
Aug 14, 2025 - Go
The ZAP by Checkmarx Core project
-
Updated
Oct 9, 2025 - Java
Web path scanner
python security scanner hacking wordlist enumeration penetration-testing bug-bounty fuzzing infosec pentesting bugbounty fuzzer brute appsec hacking-tool dirsearch pentest-tool redteam red-teaming
-
Updated
Sep 22, 2025 - Python
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
javascript security hacking owasp application-security pentesting ctf vulnerable appsec hacktoberfest owasp-top-10 owasp-top-ten 24pullrequests vulnapp
-
Updated
Oct 9, 2025 - TypeScript
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
security guide best-practices hacking owasp penetration-testing application-security pentesting bugbounty appsec hacktoberfest
-
Updated
Oct 8, 2025 - Dockerfile
A list of web application security
security scanner hacking owasp penetration-testing vulnerability web-security pentesting vulnerabilities appsec metasploit web-hacking hacking-tools
-
Updated
May 27, 2025
Next generation web scanner
ruby security web scanner hacking owasp penetration-testing application-security pentesting recon pentest kali-linux appsec network-security web-hacking security-tools penetration-test hacking-tools pentesting-tools penetration-testing-tools
-
Updated
Oct 2, 2025 - Ruby
Open Source Vulnerability Management Platform
security devops security-audit collaboration orchestration cybersecurity nmap penetration-testing vulnerability infosec pentesting cve nessus appsec vulnerability-management vulnerability-scanners burpsuite security-automation devsecops continuous-scanning
-
Updated
Oct 3, 2025 - Python
8 Lessons, Kick-start Your Cybersecurity Learning.
security identity iam secops threat-modeling appsec data-protection risk-management data-security zero-trust cia-triad
-
Updated
Sep 4, 2025 - HTML
w3af: web application attack and audit framework, the open source web vulnerability scanner.
-
Updated
Feb 22, 2023 - Python
Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...
cybersecurity infosec application-security pentesting study-guide appsec aws-security study-plan security-testing api-security azure-security appsec-tutorials gcp-security devsecops-university cybersecurity-education study-planner
-
Updated
Jul 29, 2025
Open-Source Unified Vulnerability Management, DevSecOps & ASPM
python kubernetes security automation django analytics owasp vulnerability-databases appsec vulnerability-management hacktoberfest security-orchestration security-automation devsecops vulnerability-correlation
-
Updated
Oct 10, 2025 - HTML
Git All the Payloads! A collection of web attack payloads.
-
Updated
May 15, 2023 - Shell
The parent project for OpenZiti. Here you will find the executables for a fully zero trust, application embedded, programmable network @openziti
golang networking network overlay vpn mesh overlay-network netsec appsec zero-trust zerotrust zero-trust-network zero-trust-network-access ztna zero-trust-security zero-trust-cloud ztaa ztha secure-networking vpn-2
-
Updated
Oct 9, 2025 - Go
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
security owasp bom vulnerabilities appsec component-analysis nvd vulnerability-detection hacktoberfest sca software-security security-automation devsecops software-composition-analysis bill-of-materials ossindex purl package-url sbom cyclonedx
-
Updated
Oct 10, 2025 - Java
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
golang security iac infrastructure-as-code cloudnative appsec vulnerability-detection hacktoberfest vulnerability-scanners security-tools devsecops open-policy-agent
-
Updated
Oct 10, 2025 - Open Policy Agent
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
security security-audit privacy static-code-analysis static-analysis owasp dataflow vulnerability code-quality compliance vulnerabilities appsec security-scanner gdpr security-automation security-tools devsecops sast devsecops-tools
-
Updated
Oct 9, 2025 - Go
Improve this page
Add a description, image, and links to the appsec topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the appsec topic, visit your repo's landing page and select "manage topics."