owasp

opentrap

+178

A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.

shannon

+879

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

django-DefectDojo

+112

Open-Source Unified Vulnerability Management, DevSecOps & ASPM

CheatSheetSeries

+69

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

juice-shop

+62

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

Mobile-Security-Framework-MobSF

+53

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

dependency-track

+48

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

OWASP/wstg

+48

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

coraza

+44

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library