The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

serve as a reverse proxy to protect your web services from attacks and exploits.

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

A curated list of resources for learning about application security

Next generation web scanner

Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...

🎯 Command Injection Payload List

Security automation content in SCAP, Bash, Ansible, and other formats

XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.

Metlo is an open-source API security platform.

This repository is about @harshbothra_'s 365 days of Learning Tweets & Mindmaps collection.

Curating the best DevSecOps resources and tooling.

JANUSEC Application Gateway provides secure access, including reverse proxy, K8S Ingress Controller, Automatic ACME Certificate, WAF, 5-Second Shield, CC Defense, OAuth2 Authentication, Global Server Load Balance, and Cookie Compliance etc. JANUSEC应用网关，提供安全的接入，包括反向代理、K8S Ingress Controller、自动化ACME证书、WAF、5秒盾、CC防御、OAuth2身份认证、GSLB负载均衡与Cookie合规等。

A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis

Awesome PHP Security Resources 🕶🐘🔐

Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests

Open-Source Security Architecture | 开源安全架构

Course content, lab setup instructions and documentation of our very popular Breaking and Pwning Apps and Servers on AWS and Azure hands on training!

open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.