TCP/UDP Non-HTTP Proxy Extension (NoPE) for Burp Suite.
SecurityExplained is a new series after the previous learning challenge series #Learn365. The aim of #SecurityExplained series is to create informational content in multiple formats and share with the community to enable knowledge creation and learning.
Web Application Secure Coding Handbook resource.
Vulnerable code snippets with fixes for Web2, Web3, API, iOS, Android and Infrastructure-as-Code (IaC)
A burp suite extension that reviews backup, old, temporary and unreferenced files on web server for sensitive information (OWASP WSTG-CONF-04, OTG-CONFIG-004)
this repository is a docker containing some "XSS vulnerability" challenges and bypass examples.
This repository is a dockerized PHP application containing some file upload vulnerability challenges (scenarios).
Understand web vulnerabilities with WildWebApps! Multi-language vulnerable/fixed code, OWASP Top 10 mapping, attack-path diagrams, and a runnable offline lab for each (SQLi, XSS, and more). For cybersecurity, AppSec, SOC, pentesters.
Android Pentest Framework
Agentic AI for DevSecOps: Transforming Security with GitHub Advanced Security and GitHub Copilot. GitHub Advanced Security - DevSecOps Guidelines - Unified visibility into DevOps security posture. DevSecOps E2E Demos.
A collection of awesome framework, libraries, learning tutorials, videos, webcasts, technical resources and cool stuff about General Data Protection Regulation (GDPR).
Hybrid Encryption RSA + AES in Swift
Flutter plugin to verify the integrity of the app and detect if it has been tampered at run time.
Provides different utilities methods to apply processing from a defensive security perspective.
Ghosted is a Trust Erosion scanner, pulling domains from your CSP checking if they're available to buy.
This repository hosts DSP AppSec internal infrastructure apps deployed in GKE.
Tiny BOM generator for your CI
Modern, modular Swift framework for iOS/macOS security: encryption, hashing, biometrics, keychain, jailbreak detection, integrity, network, random, and more.
Optimize your web vulnerability assessments with PassiveDigger, a comprehensive Burp Suite extension that specializes in passive traffic analysis. Detect potential vulnerabilities, get actionable insights, and supercharge your security audits.
To associate your repository with the appsecurity topic, visit your repo's landing page and select "manage topics."