All projects
22 repositories · updated 2026-11-07
Loading…
1OWASP / CheatSheetSeriesOWASP reference collection of concise guidance on application security topics.JavaScriptCC-BY-SA-4.0 · Share derivative sourceInsufficient rank history33,916
2MobSF / Mobile-Security-Framework-MobSFMobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.PythonGPL-3.0 · Share derivative sourceInsufficient rank history22,156
3vitalysim / Awesome-Hacking-ResourcesA collection of hacking / penetration testing resources to make you better!GPL-3.0 · Share derivative sourceInsufficient rank history17,612
4owasp-amass / amassIn-depth attack surface mapping and asset discoveryGoLicense not declaredInsufficient rank history15,475
5juice-shop / juice-shopOWASP Juice Shop: Probably the most modern and sophisticated insecure web applicationTypeScriptMIT · PermissiveInsufficient rank history14,384
6OWASP / wstgThe Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.CSSCC-BY-SA-4.0 · Share derivative sourceInsufficient rank history10,218
7infoslack / awesome-web-hackingA list of web application securityMIT · PermissiveInsufficient rank history7,346
8paragonie / awesome-appsecA curated list of resources for learning about application securityPHPMIT · PermissiveInactiveInsufficient rank history7,134
9urbanadventurer / WhatWebNext generation web scannerRubyGPL-2.0 · Share derivative sourceInactiveInsufficient rank history6,989
10microsoft / agent-governance-toolkitAI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.PythonMIT · PermissiveInsufficient rank history6,532
11madhuakula / kubernetes-goatKubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀HTMLMIT · PermissiveInactiveInsufficient rank history5,938
12OWASP / NettackerAutomated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability ManagementPythonApache-2.0 · PermissiveInsufficient rank history5,715
13DefectDojo / django-DefectDojoOpen-Source Unified Vulnerability Management, DevSecOps & ASPMPythonBSD-3-Clause · PermissiveInsufficient rank history5,195
14DependencyTrack / dependency-trackDependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.JavaApache-2.0 · PermissiveInsufficient rank history4,420
15corazawaf / corazaOWASP Coraza WAF is a golang modsecurity compatible web application firewall libraryGoApache-2.0 · PermissiveInsufficient rank history4,002
16husnainfareed / awesome-ethical-hacking-resources😎 🔗 Awesome list about all kinds of resources for learning Ethical Hacking and Penetration Testing.MIT · PermissiveInactiveInsufficient rank history3,822
17microcosm-cc / bluemondaybluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSSGoBSD-3-Clause · PermissiveInactiveInsufficient rank history3,730
18coreruleset / corerulesetOWASP CRS (Official Repository)PythonApache-2.0 · PermissiveInsufficient rank history3,344
19lirantal / awesome-nodejs-securityAwesome Node.js Security resourcesLicense not declaredInsufficient rank history3,056
20Bearer / bearerCode security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.GoLicense not declaredInsufficient rank history2,785
