endsu Goto Github PK

amass

In-depth Attack Surface Mapping and Asset Discovery

benchmark

OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually exploitable, it’s a fair test for any kind of vulnerability detection tool. For more details on this project, please see the OWASP Benchmark Project home page.

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

chowdersplat

netshell features all in version 2 powershell

cloud-testing-guide

endgame

An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share the resources with the entire internet 😈

go-scp

Go programming language secure coding practices guide

honeypot-project

nodegoat

The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.

o-saft

O-Saft - OWASP SSL advanced forensic tool

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security development, testing and reverse engineering.

owasp-vwad

The OWASP Vulnerable Web Applications Directory Project (VWAD) is a comprehensive and well maintained registry of all known vulnerable web applications currently available.

powerfork

PowerSploit - A PowerShell Post-Exploitation Framework

securityshepherd

Web and mobile application security training platform

wstg

The OWASP Web Security Testing Guide includes a "best practice" penetration testing framework which users can implement in their own organizations and a "low level" penetration testing guide that describes techniques for testing most common web application and web service security issues.

www-project-testing

OWASP Foundation Web Respository

www-project-webgoat

OWASP Foundation Web Respository

www-project-zap

OWASP Zed Attack Proxy project landing page