The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

A collection of hacking / penetration testing resources to make you better!

In-depth attack surface mapping and asset discovery

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

A curated list of resources for learning about application security

A list of web application security

Next generation web scanner

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

DevSecOps, ASPM, Vulnerability Management. All on one platform.

bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

Awesome Node.js Security resources

Automated Security Testing For REST API's

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

OWASP CRS (Official Repository)

The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.

Full-stack .Net 8 Clean Architecture (Microservices, Modular Monolith, Monolith), Blazor, Angular 17, React 18, Vue 3, BFF with YARP, Domain-Driven Design, CQRS, SOLID, Asp.Net Core Identity Custom Storage, OpenID Connect, Entity Framework Core, Selenium, SignalR, Hosted Services, Health Checks, Rate Limiting, Cloud Services (Azure, AWS, Google)...