Repositories list

• Nest

  Public
  Your gateway to OWASP. Discover, engage, and help shape the future!

  reactpythongraphql+ 10kubernetesdjangotypescriptrestnextjsk8sgsoc+ 3

  Python

  •

  MIT License

  •103•89•65•23•Updated Jun 19, 2025Jun 19, 2025

• wrongsecrets-ctf-party

  Public
  Run Capture the Flags and Security Trainings with OWASP WrongSecrets

  gitdockerkubernetes+ 6awssecurityctftraining-materialsctfdhacktoberfest

  JavaScript

  •

  Apache License 2.0

  •149•48•8•15•Updated Jun 18, 2025Jun 18, 2025

• www-project-ai-security-and-privacy-guide

  Public
  OWASP Foundation Web Respository

  HTML

  •61•267•7•3•Updated Jun 18, 2025Jun 18, 2025

• owasp.github.io

  Public
  OWASP Foundation main site repository

  HTML

  •

  Creative Commons Attribution Share Alike 4.0 International

  •287•591•13•9•Updated Jun 18, 2025Jun 18, 2025

• www-project-mcp-top-10

  Public
  OWASP Foundation web repository

  HTML

  •

  Other

  •0•0•0•0•Updated Jun 18, 2025Jun 18, 2025

• www-project-artificial-intelligence-vulnerability-scoring-system

  Public
  OWASP Foundation web repository

  Python

  •

  Other

  •15•18•2•5•Updated Jun 18, 2025Jun 18, 2025

• www-project-top-10-for-large-language-model-applications

  Public
  OWASP Foundation Web Respository

  TeX

  •

  Other

  •196•770•13•5•Updated Jun 18, 2025Jun 18, 2025

• www-project-ai-maturity-assessment

  Public
  OWASP Foundation web repository

  Python

  •

  Apache License 2.0

  •9•26•0•0•Updated Jun 18, 2025Jun 18, 2025

• www-project-top-10-infrastructure-security-risks

  Public
  OWASP Top 10 Infrastructure Security Risks

  owasp-top-10infrastructure-security

  HTML

  •

  Creative Commons Attribution Share Alike 4.0 International

  •7•34•0•1•Updated Jun 18, 2025Jun 18, 2025

• owasp-mastg

  Public
  The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

  static-analysisandroid-applicationios-app+ 16dynamic-analysispentestingmobile-securitynetwork-analysismastreverse-enginneringruntime-analysis+ 9

  Python

  •

  Creative Commons Attribution Share Alike 4.0 International

  •2.5k•12k•304•31•Updated Jun 18, 2025Jun 18, 2025

• www-project-operational-technology-top-10

  Public
  OWASP Foundation web repository

  HTML

  •

  Creative Commons Attribution Share Alike 4.0 International

  •7•10•6•0•Updated Jun 18, 2025Jun 18, 2025

• www-chapter-coimbra

  Public
  OWASP Foundation web repository

  HTML

  •0•0•0•0•Updated Jun 18, 2025Jun 18, 2025

• www-chapter-kanpur

  Public
  OWASP Foundation Web Respository

  HTML

  •1•0•0•0•Updated Jun 18, 2025Jun 18, 2025

• www-chapter-italy

  Public
  OWASP Foundation Web Respository

  HTML

  •4•8•0•0•Updated Jun 18, 2025Jun 18, 2025

• cornucopia

  Public
  The source files and tools needed to build the OWASP Cornucopia decks in various languages

  cardcard-gamegamification+ 1threat-modeling

  Python

  •

  Other

  •29•69•22•2•Updated Jun 18, 2025Jun 18, 2025

• www-chapter-cologne

  Public
  OWASP Foundation web repository

  HTML

  •0•2•0•0•Updated Jun 18, 2025Jun 18, 2025

• www-project-nightingale

  Public
  OWASP Foundation Web Respository

  HTML

  •3•9•0•0•Updated Jun 18, 2025Jun 18, 2025

• www-chapter-rajasthan-technical-university

  Public
  OWASP Foundation web repository

  HTML

  •0•0•0•0•Updated Jun 18, 2025Jun 18, 2025

• www-project-ai-testing-guide

  Public
  OWASP Foundation web repository

  HTML

  •

  Other

  •0•3•0•0•Updated Jun 18, 2025Jun 18, 2025

• www-project-agent-observability-standard

  Public
  Agent Observability Standard

  Apache License 2.0

  •16•35•20•2•Updated Jun 18, 2025Jun 18, 2025

• threat-dragon

  Public
  An open source threat modeling tool from OWASP

  owaspthreat-modelingsdlc+ 2threat-dragonowasp-threat-dragon

  JavaScript

  •

  Apache License 2.0

  •301•1.1k•75•4•Updated Jun 18, 2025Jun 18, 2025

• Nettacker

  Public
  Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

  pythonsecurityautomation+ 17scannerbruteforceowasppenetration-testingpentestingreconcve+ 10

  Python

  •

  Apache License 2.0

  •875•4.2k•25•21•Updated Jun 18, 2025Jun 18, 2025

• wrongsecrets

  Public
  Vulnerable app with examples showing how to not use secrets

  javadockerkubernetes+ 16awssecurityvaultazuregcpsecretsowasp+ 9

  Java

  •

  GNU Affero General Public License v3.0

  •453•1.3k•23•12•Updated Jun 18, 2025Jun 18, 2025

• www-chapter-panama-city

  Public
  OWASP Foundation Web Respository

  HTML

  •4•0•0•0•Updated Jun 18, 2025Jun 18, 2025

• www-chapter-doha

  Public
  OWASP Foundation Web Respository

  HTML

  •4•0•0•0•Updated Jun 18, 2025Jun 18, 2025

• www-chapter-leiria

  Public
  OWASP Foundation web repository

  HTML

  •0•0•0•0•Updated Jun 17, 2025Jun 17, 2025

• www-chapter-cotonou

  Public
  OWASP Foundation Web Respository

  HTML

  •2•2•0•1•Updated Jun 17, 2025Jun 17, 2025

• www-chapter-managua

  Public
  OWASP Foundation web repository

  HTML

  •0•0•0•0•Updated Jun 17, 2025Jun 17, 2025

• www-chapter-edmonton

  Public
  OWASP Foundation Web Respository

  HTML

  •2•1•0•1•Updated Jun 17, 2025Jun 17, 2025

• www-chapter-madison

  Public
  OWASP Foundation Web Respository

  HTML

  •1•1•0•0•Updated Jun 17, 2025Jun 17, 2025