The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
-
Updated
Jul 24, 2026 - Python
#
application-security
Here are 699 public repositories matching this topic...
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
security hackers api-gateway captcha firewall waf xss bruteforce self-hosted cybersecurity sql-injection vulnerability application-security web-security cve appsec web-application-firewall http-flood blueteam websecurity
-
Updated
Jul 21, 2026 - Go
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
javascript security hacking owasp application-security pentesting ctf vulnerable appsec hacktoberfest owasp-top-10 owasp-top-ten 24pullrequests vulnapp
-
Updated
Jul 23, 2026 - TypeScript
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
security guide best-practices hacking owasp penetration-testing application-security pentesting bugbounty appsec hacktoberfest
-
Updated
Jul 20, 2026
A curated list of resources for learning about application security
-
Updated
Feb 22, 2025 - PHP
Next generation web scanner
ruby security web scanner hacking owasp penetration-testing application-security pentesting recon pentest kali-linux appsec network-security web-hacking security-tools penetration-test hacking-tools pentesting-tools penetration-testing-tools
-
Updated
Apr 2, 2026 - Ruby
Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...
cybersecurity infosec application-security pentesting study-guide appsec aws-security study-plan security-testing api-security azure-security appsec-tutorials gcp-security devsecops-university cybersecurity-education study-planner
-
Updated
Apr 23, 2026
A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.
bug-bounty application-security web-security pentesting bugbounty offensive-security ethical-hacking red-team bugcrowd hackerone security-tools claude ai-security anthropic claude-code claude-skills
-
Updated
Jul 22, 2026 - Python
Security automation content in SCAP, Bash, Ansible, and other formats
security ansible cybersecurity pci-dss application-security compliance scap hardening security-hardening xccdf oval cpe information-security cce usgcb ospp stig security-automation security-tools security-profile
-
Updated
Jul 24, 2026 - Shell
A curated list of awesome Android Reverse Engineering training, resources, and tools.
android training awesome tools reverse-engineering application-security awesome-list malware-analysis ctfs crackmes mobsec
-
Updated
Jul 8, 2025
Metlo is an open-source API security platform.
aws security monitoring api-gateway cybersecurity infosec application-security vulnerabilities bugbounty pentest vulnerability-detection api-security api-pentest infosectools bugbounty-tools metlo
-
Updated
Jul 25, 2025 - TypeScript
XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.
-
Updated
Sep 12, 2020 - PHP
Curating the best DevSecOps resources and tooling.
devops awesome application-security awesome-list hacktoberfest devsecops secure-software-development
-
Updated
Aug 2, 2024
This repository is about @harshbothra_'s 365 days of Learning Tweets & Mindmaps collection.
learning community infosec application-security pentesting vulnerabilities bugbounty pentesting-tools bugbountytips
-
Updated
Jun 20, 2022
Industry-leading free, high-performance, AI and semantic technology Web Application Firewall and API Security Gateway (WAAP) - UUSEC WAF.
letsencrypt security ddos api-gateway waf xss owasp sql-injection application-security modsecurity web-application-firewall data-mask hips rasp api-security waap web-security-gateway uuwaf uusec-waf uusec
-
Updated
Jul 19, 2026 - Shell
open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.
nginx kubernetes rate-limiting waf owasp kong application-security appsec web-application-firewall security-tools owasp-top-ten devsecops api-security nginx-proxy-manager threat-prevention
-
Updated
May 26, 2026 - C++
JANUSEC Application Gateway provides secure access, including reverse proxy, K8S Ingress Controller, Automatic ACME Certificate, WAF, 5-Second Shield, CC Defense, OAuth2 Authentication, Global Server Load Balance, and Cookie Compliance etc. JANUSEC应用网关，提供安全的接入，包括反向代理、K8S Ingress Controller、自动化ACME证书、WAF、5秒盾、CC防御、OAuth2身份认证、GSLB负载均衡与Cookie合规等。
golang security acme gateway waf sql-injection application-security web-application-firewall port-forwarding gslb web-application-security web-ssh cookie-banner application-gateway load-balance janusec-application-gateway janusec k8s-ingress-controller cookie-compliance
-
Updated
Jul 18, 2026 - Go
Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests
-
Updated
Mar 21, 2026 - Python
A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
android reverse-engineering penetration-testing application-security malware-analyzer mobile-security
-
Updated
May 31, 2023
An AI-powered threat modeling tool that leverages OpenAI's GPT models to generate threat models for a given application based on the STRIDE methodology.
mcp cybersecurity application-security threat-modeling attack-trees security-tools dread stride mitre-attack ai-security streamlit llm generative-ai
-
Updated
Jul 21, 2026 - Python
Improve this page
Add a description, image, and links to the application-security topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the application-security topic, visit your repo's landing page and select "manage topics."