OWASP
Repositories list
1.4k repositories
- Run Capture the Flags and Security Trainings with OWASP WrongSecrets
- The source files and tools needed to build the OWASP Cornucopia decks in various languages
- An automated tool to verify contributions and generate verifiable credentials for OWASP community members.
- Self-hosted OWASP CTF kit: one box, one free GitHub org, no cloud dependencies
- Source code for the Binaries of OWASP WrongSecrets
SecretSifter
PublicOWASP Incubator project: detects credentials exposed in browser-delivered content (JavaScript, config responses, live traffic).- The OWASP Subtractive Security Top 10 Project is an initiative to identify, document, and promote the highest-impact opportunities for reducing cyber risk throu…
- OWASP Community Pages are a place where OWASP can accept community contributions for security-related content.
- The Web Security Testing Guide (WSTG) Project produces the premier cybersecurity testing resource for web application developers and security professionals.
- The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
- Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command
- Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output,…
- An open source threat modeling tool from OWASP
FIASSE
Public- The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
- OWASP Schema
- Contextual output encoding for Java 8+: HTML, JavaScript, CSS, XML and URI components. Zero-dependency core with optional JSP and Jakarta adapters.
- OWASP Foundation Web Respository
ProTip! When viewing an organization's repositories, you can use the
props. filter to filter by custom property.