The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

A collection of hacking / penetration testing resources to make you better!

In-depth attack surface mapping and asset discovery

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

A curated list of resources for learning about application security

A list of web application security

Next generation web scanner

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

DevSecOps, ASPM, Vulnerability Management. All on one platform.

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS

Awesome Node.js Security resources

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

😎 🔗 Awesome list about all kinds of resources for learning Ethical Hacking and Penetration Testing.

Automated Security Testing For REST API's

OWASP CRS (Official Repository)

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)