The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
-
Updated
Oct 13, 2025 - Python
#
application-security
Here are 343 public repositories matching this topic...
Language: All
Filter by language
Sort: Most stars
Sort options
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
security hackers api-gateway captcha firewall waf xss bruteforce self-hosted cybersecurity sql-injection vulnerability application-security web-security cve appsec web-application-firewall http-flood blueteam websecurity
-
Updated
Aug 14, 2025 - Go
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
javascript security hacking owasp application-security pentesting ctf vulnerable appsec hacktoberfest owasp-top-10 owasp-top-ten 24pullrequests vulnapp
-
Updated
Oct 15, 2025 - TypeScript
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
security guide best-practices hacking owasp penetration-testing application-security pentesting bugbounty appsec hacktoberfest
-
Updated
Oct 14, 2025 - Dockerfile
A curated list of resources for learning about application security
-
Updated
Feb 22, 2025 - PHP
Next generation web scanner
ruby security web scanner hacking owasp penetration-testing application-security pentesting recon pentest kali-linux appsec network-security web-hacking security-tools penetration-test hacking-tools pentesting-tools penetration-testing-tools
-
Updated
Oct 2, 2025 - Ruby
Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...
cybersecurity infosec application-security pentesting study-guide appsec aws-security study-plan security-testing api-security azure-security appsec-tutorials gcp-security devsecops-university cybersecurity-education study-planner
-
Updated
Jul 29, 2025
🎯 Command Injection Payload List
windows macos linux security application unix command os injection vulnerability application-security security-vulnerability bugbounty payload command-injection security-testing security-research vulnerability-research payload-list os-injection
-
Updated
Jul 18, 2024
Security automation content in SCAP, Bash, Ansible, and other formats
security ansible cybersecurity pci-dss application-security compliance scap hardening security-hardening xccdf oval cpe information-security cce usgcb ospp stig security-automation security-tools security-profile
-
Updated
Oct 16, 2025 - Shell
XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.
-
Updated
Sep 12, 2020 - PHP
Metlo is an open-source API security platform.
aws security monitoring api-gateway cybersecurity infosec application-security vulnerabilities bugbounty pentest vulnerability-detection api-security api-pentest infosectools bugbounty-tools metlo
-
Updated
Jul 25, 2025 - TypeScript
This repository is about @harshbothra_'s 365 days of Learning Tweets & Mindmaps collection.
learning community infosec application-security pentesting vulnerabilities bugbounty pentesting-tools bugbountytips
-
Updated
Jun 20, 2022
Curating the best DevSecOps resources and tooling.
devops awesome application-security awesome-list hacktoberfest devsecops secure-software-development
-
Updated
Aug 2, 2024
Industry-leading free, high-performance, AI and semantic technology Web Application Firewall and API Security Gateway (WAAP) - UUSEC WAF.
letsencrypt security ddos api-gateway waf xss owasp sql-injection application-security modsecurity web-application-firewall data-mask hips rasp api-security waap web-security-gateway uuwaf uusec-waf uusec
-
Updated
Oct 15, 2025 - Lua
open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.
nginx kubernetes rate-limiting waf owasp kong application-security appsec web-application-firewall security-tools owasp-top-ten devsecops api-security nginx-proxy-manager threat-prevention
-
Updated
Oct 8, 2025 - C++
Penetration Testing For - Web | Mobile | API | Thick Client | Source Code Review | DevSecOps | Wireless | Network Pentesting, etc...
application-security infrastucture source-code appsec network-security forensic-analysis iot-security-testing docker-security wifi-hacking thick-client active-directory-security mobile-pentesting api-pentesting
-
Updated
Aug 30, 2025
A curated list of awesome Android Reverse Engineering training, resources, and tools.
android training awesome tools reverse-engineering application-security awesome-list malware-analysis ctfs crackmes mobsec
-
Updated
Jul 8, 2025
JANUSEC Application Gateway provides secure access, including reverse proxy, K8S Ingress Controller, Automatic ACME Certificate, WAF, 5-Second Shield, CC Defense, OAuth2 Authentication, Global Server Load Balance, and Cookie Compliance etc. JANUSEC应用网关,提供安全的接入,包括反向代理、K8S Ingress Controller、自动化ACME证书、WAF、5秒盾、CC防御、OAuth2身份认证、GSLB负载均衡与Cookie合规等。
golang security acme gateway waf sql-injection application-security web-application-firewall port-forwarding gslb web-application-security web-ssh cookie-banner application-gateway load-balance janusec-application-gateway janusec k8s-ingress-controller cookie-compliance
-
Updated
Aug 23, 2025 - Go
A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
android reverse-engineering penetration-testing application-security malware-analyzer mobile-security
-
Updated
May 31, 2023
Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests
-
Updated
Jul 3, 2025 - Python
Improve this page
Add a description, image, and links to the application-security topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the application-security topic, visit your repo's landing page and select "manage topics."