appsec

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

Automatic SQL injection and database takeover tool

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

The ZAP by Checkmarx Core project

Web path scanner

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

A list of web application security

8 Lessons, Kick-start Your Cybersecurity Learning.

Next generation web scanner

Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.

Golang Secure Coding Practices guide

Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...

Open-Source Unified Vulnerability Management, DevSecOps & ASPM

w3af: web application attack and audit framework, the open source web vulnerability scanner.

An OOB interaction gathering server and client library

The parent project for OpenZiti. Here you will find the executables for a fully zero-trust, programmable network @openziti

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Git All the Payloads! A collection of web attack payloads.