The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

A collection of hacking / penetration testing resources to make you better!

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

A curated list of resources for learning about application security

In-depth Attack Surface Mapping and Asset Discovery

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

Next generation web scanner

Automated Security Testing For REST API's

bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS

In-depth Attack Surface Mapping and Asset Discovery

DefectDojo is an open-source application vulnerability correlation and security orchestration tool.

Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient http://owtf.org https://twitter.com/owtfp

Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14 platforms.

Awesome Node.js Security resources

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

Automated Penetration Testing Framework

🔗 All the resources I could find for learning Ethical Hacking and Penetration Testing.

Dependency-Track is an intelligent Supply Chain Component Analysis platform that allows organizations to identify and reduce risk from the use of third-party and open source components.

OWASP Joomla Vulnerability Scanner Project

OWASP ZSC - Shellcode/Obfuscate Code Generator

OWASP WEB Directory Scanner

Vulnerability Patterns Detector for C# and VB.NET

OWASP ZAP Add-ons

OWASP Web Application Security Testing Checklist

Damn Vulnerable NodeJS Application

The OWASP Vulnerable Web Applications Directory project (VWAD) is a comprehensive and well maintained registry of all known vulnerable web applications currently available.