DefectDojo is an open-source application vulnerability correlation and security orchestration tool.

A Central Control Plane for AWS Permissions and Access

Open Source Identity and Access Management For Modern Applications and Services

Interactive Terraform visualization. State and configuration explorer.

J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.

Source code for 'ASP.NET MVC 4 and the Web API' by Jamie Kurtz

Scripts for solving WebSecurity Academy labs of PortSwigger using Python

Sample .Net and .Net core 3.x application with ShiftLeft Inspect integration

Clinic management project using Asp.net mvc5

Creates CycloneDX Software Bill-of-Materials (SBOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI//CD pipeline with automati…

A demo app showcasing vulnerabilities of web applications using Asp.Net Mvc

API Security Project aims to present unique attack & defense methods in API Security field

Vulnerable ASP.NET Core 2.0 App

The .NET Project System for Visual Studio

Finds unknown classes of injection vulnerabilities

Self-hosted CMS platform based on the Laravel PHP Framework.

Kubernetes Security Checklist and Requirements - All in One (authentication, authorization, logging, secrets, configuration, network, workloads, dockerfile)

This is one of the largest checklist available so far on the Internet.

30 days of Python programming challenge is a step-by-step guide to learn the Python programming language in 30 days. This challenge may take more than100 days, follow your own pace.

30 days of JavaScript programming challenge is a step-by-step guide to learn JavaScript programming language in 30 days. This challenge may take more than 100 days, please just follow your own pace.

Mind-Maps of Several Things

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST),…

Web Application Secure Coding Handbook resource.

Basics on commands/tools/info on how to assess the security of mobile applications

PHP Unserialize Check - Burp Scanner Extension

OSWE, OSEP, OSED