The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
-
Updated
Oct 6, 2026 - JavaScript
#
application-security
Here are 1,149 public repositories matching this topic...
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
security hackers api-gateway captcha firewall waf xss bruteforce self-hosted cybersecurity sql-injection vulnerability application-security web-security cve appsec web-application-firewall http-flood blueteam websecurity
-
Updated
Sep 28, 2026 - Go
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
javascript security hacking owasp application-security pentesting ctf vulnerable appsec hacktoberfest owasp-top-10 owasp-top-ten 24pullrequests vulnapp
-
Updated
Oct 7, 2026 - TypeScript
OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security
nodejs cli npm security typescript sdk cybersecurity openai application-security codex devsecops vulnerability-scanning code-scanning ai-security codex-security
-
Updated
Oct 7, 2026 - TypeScript
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
security guide best-practices hacking owasp penetration-testing application-security pentesting bugbounty appsec hacktoberfest
-
Updated
Oct 5, 2026 - Python
A curated list of resources for learning about application security
-
Updated
Feb 22, 2025 - PHP
Next generation web scanner
ruby security web scanner hacking owasp penetration-testing application-security pentesting recon pentest kali-linux appsec network-security web-hacking security-tools penetration-test hacking-tools pentesting-tools penetration-testing-tools
-
Updated
Apr 2, 2026 - Ruby
Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...
cybersecurity infosec application-security pentesting study-guide appsec aws-security study-plan security-testing api-security azure-security appsec-tutorials gcp-security devsecops-university cybersecurity-education study-planner
-
Updated
Sep 14, 2026
A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.
bug-bounty application-security web-security pentesting bugbounty offensive-security ethical-hacking red-team bugcrowd hackerone security-tools claude ai-security anthropic claude-code claude-skills
-
Updated
Oct 6, 2026 - Python
Security automation content in SCAP, Bash, Ansible, and other formats
security ansible cybersecurity pci-dss application-security compliance scap hardening security-hardening xccdf oval cpe information-security cce usgcb ospp stig security-automation security-tools security-profile
-
Updated
Oct 6, 2026 - Shell
A curated list of awesome Android Reverse Engineering training, resources, and tools.
android training awesome tools reverse-engineering application-security awesome-list malware-analysis ctfs crackmes mobsec
-
Updated
Jul 8, 2025
A modular, stack-agnostic toolkit for AI coding agents to autonomously find, reproduce, and patch vulnerabilities.
security static-analysis code-review application-security threat-modeling vulnerability-detection multi-agent-systems adk devsecops ai-agents sast hardware-security gemini-api llm prompt-engineering gemini-cli antigravity adk-python application-security-tools antigravity-cli
-
Updated
Oct 7, 2026 - Python
This repository is about @harshbothra_'s 365 days of Learning Tweets & Mindmaps collection.
learning community infosec application-security pentesting vulnerabilities bugbounty pentesting-tools bugbountytips
-
Updated
Jun 20, 2022
Metlo is an open-source API security platform.
aws security monitoring api-gateway cybersecurity infosec application-security vulnerabilities bugbounty pentest vulnerability-detection api-security api-pentest infosectools bugbounty-tools metlo
-
Updated
Jul 25, 2025 - TypeScript
XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.
-
Updated
Sep 12, 2020 - PHP
Curating the best DevSecOps resources and tooling.
devops awesome application-security awesome-list hacktoberfest devsecops secure-software-development
-
Updated
Aug 2, 2024
open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.
nginx kubernetes rate-limiting waf owasp kong application-security appsec web-application-firewall security-tools owasp-top-ten devsecops api-security nginx-proxy-manager threat-prevention
-
Updated
Sep 6, 2026 - C++
Industry-leading free, high-performance, AI and semantic technology Web Application Firewall and API Security Gateway (WAAP) - UUSEC WAF.
letsencrypt security ddos api-gateway waf xss owasp sql-injection application-security modsecurity web-application-firewall data-mask hips rasp api-security waap web-security-gateway uuwaf uusec-waf uusec
-
Updated
Oct 7, 2026 - Shell
JANUSEC Application Gateway provides secure access, including reverse proxy, K8S Ingress Controller, Automatic ACME Certificate, WAF, 5-Second Shield, CC Defense, OAuth2 Authentication, Global Server Load Balance, and Cookie Compliance etc. JANUSEC应用网关，提供安全的接入，包括反向代理、K8S Ingress Controller、自动化ACME证书、WAF、5秒盾、CC防御、OAuth2身份认证、GSLB负载均衡与Cookie合规等。
golang security acme gateway waf sql-injection application-security web-application-firewall port-forwarding gslb web-application-security web-ssh cookie-banner application-gateway load-balance janusec-application-gateway janusec k8s-ingress-controller cookie-compliance
-
Updated
Jul 18, 2026 - Go
A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
android reverse-engineering penetration-testing application-security malware-analyzer mobile-security
-
Updated
May 31, 2023
Add this topic to your repo
To associate your repository with the application-security topic, visit your repo's landing page and select "manage topics."