GitHub stars · StarDay

1OWASP / CheatSheetSeriesOWASP reference collection of concise guidance on application security topics.JavaScriptCC-BY-SA-4.0 · Share derivative source33,916

2chaitin / SafeLineSafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.GoGPL-3.0 · Share derivative source23,178

3juice-shop / juice-shopOWASP Juice Shop: Probably the most modern and sophisticated insecure web applicationTypeScriptMIT · Permissive14,377

4openai / codex-securityOpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-securityTypeScriptApache-2.0 · Permissive11,310

5OWASP / wstgThe Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.CSSCC-BY-SA-4.0 · Share derivative source10,212

6paragonie / awesome-appsecA curated list of resources for learning about application securityPHPMIT · Permissive7,132

7urbanadventurer / WhatWebNext generation web scannerRubyGPL-2.0 · Share derivative source6,989

8elementalsouls / Claude-BugHunterA Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.PythonMIT · Permissive5,462

9jassics / security-study-planComplete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...License not declared5,122

10harsh-bothra / learn365This repository is about @harshbothra_'s 365 days of Learning Tweets & Mindmaps collection.License not declared1,994

11openappsec / openappsecopen-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.C++Apache-2.0 · Permissive1,746

12olacabs / jackhammerJackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.JavaLicense not declared738

13jassics / cybersecurity-roadmapSkills and career roadmap for various security roles like application security, cloud security, DevSecOps, security engineer, security researchers, pentesting, api security, network security, mobile security and so on with helpful resources, guidelinesGPL-3.0 · Share derivative source513

14flipkart-incubator / watchdogWatchdog - A Comprehensive Security Scanning and a Vulnerability Management Tool.PythonApache-2.0 · Permissive428