The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
-
Updated
Mar 19, 2026 - Python
#
owasp
Here are 1,431 public repositories matching this topic...
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
rest static-analysis apk owasp dynamic-analysis web-security malware-analysis mobsf android-security mobile-security windows-mobile-security ios-security api-testing cwe devsecops runtime-security mstg masvs mastg
-
Updated
Mar 22, 2026 - JavaScript
A collection of hacking / penetration testing resources to make you better!
exploit reverse-engineering malware mitm hacking owasp penetration-testing ctf privilege-escalation buffer-overflow windows-privilege-escalation privilege-escalation-linux
-
Updated
Mar 12, 2024
In-depth attack surface mapping and asset discovery
go dns golang osint owasp subdomain enumeration recon maltego network-security information-gathering osint-reconnaissance attack-surfaces
-
Updated
Mar 21, 2026 - Go
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
javascript security hacking owasp application-security pentesting ctf vulnerable appsec hacktoberfest owasp-top-10 owasp-top-ten 24pullrequests vulnapp
-
Updated
Mar 22, 2026 - TypeScript
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
security guide best-practices hacking owasp penetration-testing application-security pentesting bugbounty appsec hacktoberfest
-
Updated
Mar 18, 2026
A curated list of resources for learning about application security
-
Updated
Feb 22, 2025 - PHP
A list of web application security
security scanner hacking owasp penetration-testing vulnerability web-security pentesting vulnerabilities appsec metasploit web-hacking hacking-tools
-
Updated
Feb 27, 2026
Next generation web scanner
ruby security web scanner hacking owasp penetration-testing application-security pentesting recon pentest kali-linux appsec network-security web-hacking security-tools penetration-test hacking-tools pentesting-tools penetration-testing-tools
-
Updated
Oct 19, 2025 - Ruby
Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀
docker kubernetes infrastructure security container hacking owasp k8s cloud-native pentesting blueteam cloudsecurity devsecops cloud-security redteam container-security vulnerable-app kubernetes-security kubernetes-goat
-
Updated
Nov 18, 2025 - HTML
Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
python security automation scanner bruteforce owasp penetration-testing pentesting recon cve vulnerability-management vulnerability-scanners network-security information-gathering portscanner security-tools vulnerability-scanner penetration-testing-framework hacking-tools pentesting-tools
-
Updated
Mar 21, 2026 - Python
Open-Source Unified Vulnerability Management, DevSecOps & ASPM
python kubernetes security automation django analytics owasp vulnerability-databases appsec vulnerability-management hacktoberfest security-orchestration security-automation devsecops vulnerability-correlation
-
Updated
Mar 22, 2026 - HTML
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
security owasp bom vulnerabilities appsec component-analysis nvd vulnerability-detection hacktoberfest sca software-security security-automation devsecops software-composition-analysis bill-of-materials ossindex purl package-url sbom cyclonedx
-
Updated
Mar 21, 2026 - Java
😎 🔗 Awesome list about all kinds of resources for learning Ethical Hacking and Penetration Testing.
awesome hacking resources owasp penetration-testing awesome-list ctf hacktoberfest ethical-hacking web-hacking vulnerable-applications learning-hacking hacking-resources
-
Updated
Dec 15, 2024
OWASP Coraza WAF is a golang modsecurity compatible web application firewall library
go golang http waf owasp modsecurity hacktoberfest web-application-firewall coraza coraza-waf owasp-crs coreruleset
-
Updated
Mar 21, 2026 - Go
Awesome Node.js Security resources
nodejs security awesome owasp cybersecurity infosec awesome-list web-security vulnerabilities pentest hacktoberfest
-
Updated
Mar 3, 2026
Automated Security Testing For REST API's
python security owasp ci-cd penetration-testing postman-collection sdlc security-automation penetration-testing-framework restapiautomation
-
Updated
Jun 5, 2024 - Python
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
security security-audit privacy static-code-analysis static-analysis owasp dataflow vulnerability code-quality compliance vulnerabilities appsec security-scanner gdpr security-automation security-tools devsecops sast devsecops-tools
-
Updated
Mar 19, 2026 - Go
Improve this page
Add a description, image, and links to the owasp topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the owasp topic, visit your repo's landing page and select "manage topics."