TCP/UDP Non-HTTP Proxy Extension (NoPE) for Burp Suite.
SecurityExplained is a new series after the previous learning challenge series #Learn365. The aim of #SecurityExplained series is to create informational content in multiple formats and share with the community to enable knowledge creation and learning.
Web Application Secure Coding Handbook resource.
Burp Suite extension (BApp Store) that finds backup, old, temporary and unreferenced files leaking sensitive data on web servers. OWASP WSTG-CONF-04.
Vulnerable code snippets with fixes for Web2, Web3, API, iOS, Android and Infrastructure-as-Code (IaC)
Dockerized PHP lab with XSS (cross-site scripting) challenges and filter-bypass examples for practising web exploitation.
Dockerized PHP lab with file upload vulnerability challenges: bypass upload filters to achieve remote code execution.
Understand web vulnerabilities with WildWebApps! Multi-language vulnerable/fixed code, OWASP Top 10 mapping, attack-path diagrams, and a runnable offline lab for each (SQLi, XSS, and more). For cybersecurity, AppSec, SOC, pentesters.
Android Pentest Framework
Agentic AI for DevSecOps: Transforming Security with GitHub Advanced Security and GitHub Copilot. GitHub Advanced Security - DevSecOps Guidelines - Unified visibility into DevOps security posture. DevSecOps E2E Demos.
A collection of awesome framework, libraries, learning tutorials, videos, webcasts, technical resources and cool stuff about General Data Protection Regulation (GDPR).
Hybrid Encryption RSA + AES in Swift
Flutter plugin to verify the integrity of the app and detect if it has been tampered at run time.
Provides different utilities methods to apply processing from a defensive security perspective.
Ghosted is a Trust Erosion scanner, pulling domains from your CSP checking if they're available to buy.
This repository hosts DSP AppSec internal infrastructure apps deployed in GKE.
Tiny BOM generator for your CI
Modern, modular Swift framework for iOS/macOS security: encryption, hashing, biometrics, keychain, jailbreak detection, integrity, network, random, and more.
Burp Suite extension for passive vulnerability detection: flags SQL errors, reflected parameters (XSS), LFI hints, weak cookie flags and missing security headers.
To associate your repository with the appsecurity topic, visit your repo's landing page and select "manage topics."