Search awesome repositories

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

Automatic SQL injection and database takeover tool

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

The ZAP by Checkmarx Core project

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

Open Source Vulnerability Management Platform

Open-Source Unified Vulnerability Management, DevSecOps & ASPM

The parent project for OpenZiti. Here you will find the executables for a fully zero-trust, programmable network @OpenZiti

Git All the Payloads! A collection of web attack payloads.

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.

Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.

bumpgen is an AI agent that upgrades npm packages