OWASP

All

1.3k repositories

owasp.github.io
Public
OWASP Foundation main site repository
HTML
•
Creative Commons Attribution Share Alike 4.0 International
•287•595•12•7•Updated Jul 12, 2025Jul 12, 2025
OpenCRE
Public
security security-audit standards
Python
•
Creative Commons Zero v1.0 Universal
•42•116•78•13•Updated Jul 12, 2025Jul 12, 2025
www-project-csrfguard
Public
The aim of this project is to protect Java applications against CSRF attacks with the use of Synchronizer Tokens
security owasp csrf csrf-protection hacktoberfest security-tools java maven
Java
•
BSD 3-Clause "New" or "Revised" License
•48•86•8•8•Updated Jul 12, 2025Jul 12, 2025
Nest
Public
Your gateway to OWASP. Discover, engage, and help shape the future!
react python graphql kubernetes django typescript rest nextjs k8s gsoc
Python
•
MIT License
•103•95•63•21•Updated Jul 12, 2025Jul 12, 2025
Top10
Public
Official OWASP Top 10 Document Repository
HTML
•
Other
•901•4.7k•27•6•Updated Jul 12, 2025Jul 12, 2025
wrongsecrets-ctf-party
Public
Run Capture the Flags and Security Trainings with OWASP WrongSecrets
git docker kubernetes aws security ctf training-materials ctfd hacktoberfest
JavaScript
•
Apache License 2.0
•151•49•8•10•Updated Jul 11, 2025Jul 11, 2025
www-community
Public
OWASP Community Pages are a place where OWASP can accept community contributions for security-related content.
appsec community-project owasp
HTML
•747•1.2k•14•6•Updated Jul 11, 2025Jul 11, 2025
www-project-top-ten
Public
OWASP Foundation Web Respository
HTML
•248•1.2k•10•15•Updated Jul 11, 2025Jul 11, 2025
owasp-mastg
Public
The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).
static-analysis android-application ios-app dynamic-analysis pentesting mobile-security network-analysis mast reverse-enginnering runtime-analysis
Python
•
Creative Commons Attribution Share Alike 4.0 International
•2.5k•12k•304•35•Updated Jul 11, 2025Jul 11, 2025
crAPI
Public
completely ridiculous API (crAPI)
api owasp hacktoberfest apisecurity
Java
•
Apache License 2.0
•431•1.3k•35•8•Updated Jul 11, 2025Jul 11, 2025
cornucopia
Public
The source files and tools needed to build the OWASP Cornucopia decks in various languages
cardgame games card-games owasp gamification gameserver threat-modeling appsec requirements-analysis
Python
•
Other
•29•74•25•7•Updated Jul 11, 2025Jul 11, 2025
www-chapter-heilbronn
Public
OWASP Foundation web repository
HTML
•0•0•0•0•Updated Jul 10, 2025Jul 10, 2025
www-project-ai-maturity-assessment
Public
OWASP Foundation web repository
Python
•
Apache License 2.0
•10•28•0•0•Updated Jul 10, 2025Jul 10, 2025
www-chapter-rio-de-janeiro
Public
OWASP Foundation Web Respository
HTML
•5•5•0•0•Updated Jul 10, 2025Jul 10, 2025
www-chapter-austin
Public
OWASP Foundation Web Respository
HTML
•11•4•0•0•Updated Jul 10, 2025Jul 10, 2025
www-revent-lascon
Public
OWASP Foundation Web Respository
HTML
•3•0•0•0•Updated Jul 10, 2025Jul 10, 2025
wrongsecrets
Public
Vulnerable app with examples showing how to not use secrets
java docker kubernetes aws security vault azure gcp secrets owasp
Java
•
GNU Affero General Public License v3.0
•456•1.3k•23•4•Updated Jul 9, 2025Jul 9, 2025
www-project-security-champions-guidebook
Public
OWASP Foundation Web Respository
HTML
•
Creative Commons Attribution Share Alike 4.0 International
•7•22•1•0•Updated Jul 9, 2025Jul 9, 2025
Security-Champions
Public
Creative Commons Attribution Share Alike 4.0 International
•5•13•2•0•Updated Jul 9, 2025Jul 9, 2025
www-project-fiasse
Public
OWASP Foundation web repository
HTML
•
Creative Commons Attribution Share Alike 4.0 International
•0•0•0•0•Updated Jul 9, 2025Jul 9, 2025
www-project-eks-goat
Public
OWASP EKS Goat is a deliberately vulnerable EKS cluster environment to explore AWS cloud-native security through hands-on attack and defense labs with walkthrough.
hacking owasp cloud-native aws-security cloudsecurity devsecops redteam docker-security eks redteam-infrastructure
Shell
•
GNU General Public License v3.0
•19•28•0•0•Updated Jul 9, 2025Jul 9, 2025
www-project-ai-testing-guide
Public
OWASP Foundation web repository
HTML
•
Other
•48•220•1•0•Updated Jul 9, 2025Jul 9, 2025
www-chapter-seoul
Public
OWASP Foundation Web Respository
HTML
•4•3•0•0•Updated Jul 9, 2025Jul 9, 2025
Nettacker
Public
Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
python security automation scanner bruteforce owasp penetration-testing pentesting recon cve
Python
•
Apache License 2.0
•883•4.3k•27•24•Updated Jul 9, 2025Jul 9, 2025
www-project-top-10-for-large-language-model-applications
Public
OWASP Top 10 for Large Language Model Apps (Part of the GenAI Security Project)
ai appsec llm llm-security
TeX
•
Other
•205•796•4•6•Updated Jul 9, 2025Jul 9, 2025
www-chapter-jis-university-student-chapter
Public
OWASP Foundation web repository
HTML
•0•4•0•0•Updated Jul 9, 2025Jul 9, 2025
O-Saft
Public
O-Saft - OWASP SSL advanced forensic tool
tls ssl certificate ciphers perl
Perl
•
GNU General Public License v2.0
•87•379•11•2•Updated Jul 9, 2025Jul 9, 2025
www-chapter-stuttgart
Public
OWASP Foundation Web Respository
HTML
•2•1•0•0•Updated Jul 9, 2025Jul 9, 2025
www-project-threat-model-library
Public
OWASP Foundation web repository
HTML
•
MIT License
•4•23•5•0•Updated Jul 9, 2025Jul 9, 2025
www-chapter-sri-sairam-engineering-college
Public
OWASP Foundation web repository
HTML
•1•0•0•0•Updated Jul 8, 2025Jul 8, 2025