The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

A collection of hacking / penetration testing resources to make you better!

In-depth attack surface mapping and asset discovery

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

A curated list of resources for learning about application security

A list of web application security

Next generation web scanner

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

Open-Source Unified Vulnerability Management, DevSecOps & ASPM

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS

😎 🔗 Awesome list about all kinds of resources for learning Ethical Hacking and Penetration Testing.

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library

OWASP CRS (Official Repository)

Awesome Node.js Security resources

Automated Security Testing For REST API's

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

Full-stack .Net 10 Clean Architecture (Microservices, Modular Monolith, Monolith), Blazor, Angular 21, React 19, Vue 3.5, BFF with YARP, NextJs 16, Domain-Driven Design, CQRS, SOLID, Asp.Net Core Identity Custom Storage, OpenID Connect, EF Core, OpenTelemetry, SignalR, Background Services, Health Checks, Rate Limiting, Clouds (Azure, AWS, GCP), ...

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.

The OWASP Developer Guide

OWASP Web Application Security Testing Checklist

Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14 platforms.

Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient http://owtf.org https://twitter.com/owtfp

A comprehensive guide for web application penetration testing and bug bounty hunting, covering methodologies, tools, and resources for identifying and exploiting vulnerabilities.

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses