owasp

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

A collection of hacking / penetration testing resources to make you better!

The OWASP ZAP core project

In-depth Attack Surface Mapping and Asset Discovery

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

A curated list of resources for learning about application security

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

A list of web application security

Next generation web scanner

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS

DefectDojo is a DevSecOps and vulnerability management tool.

Automated Security Testing For REST API's

Awesome Node.js Security resources

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

In-depth Attack Surface Mapping and Asset Discovery

Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14 platforms.

Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient http://owtf.org https://twitter.com/owtfp