appsec

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

The OWASP ZAP core project

Web path scanner

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

A list of web application security

w3af: web application attack and audit framework, the open source web vulnerability scanner.

Next generation web scanner

Open Source Vulnerability Management Platform

Git All the Payloads! A collection of web attack payloads.

DefectDojo is a DevSecOps and vulnerability management tool.

An OOB interaction gathering server and client library

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

Some of my security stuff and vulnerabilities. Nothing advanced. More to come.

An open source, git-ops, zero-trust secret encryption and decryption solution for Kubernetes applications

OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. Mutillidae can be installed on Linux and Windows using LAMP, WAMP, and XAMMP. It is pre-installed on SamuraiWTF and OWASP BWA. The existing version can be updated on these platforms. With dozens of vulnerabilities and hints to help the user; this is an easy-to-use web hacking environment designed for labs, security enthusiast, classrooms, CTF, and vulnerability assessment tool targets. Mutillidae has been used in graduate security courses, corporate web sec training courses, and as an "assess the assessor" target for vulnerability assessment software. A containerized version of the application is available as a companion project.

A vulnerable version of Rails that follows the OWASP Top 10

OWASP Community Pages are a place where OWASP can accept community contributions for security-related content.