The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

The ZAP core project

Web path scanner

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

A list of web application security

Next generation web scanner

Golang Secure Coding Practices guide

w3af: web application attack and audit framework, the open source web vulnerability scanner.

Open Source Vulnerability Management Platform

Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...

Git All the Payloads! A collection of web attack payloads.

DefectDojo is a DevSecOps and vulnerability management platform.

An OOB interaction gathering server and client library

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

The parent project for OpenZiti. Here you will find the executables for a fully zero trust, application embedded, programmable network @openziti

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.