davevs Goto Github PK

book_jira_risk_workflow

Content for 'JIRA Risk Project' book published at LeanPub

book_software_quality

Content for 'Measuring Software Quality using Application Security' book published at LeanPub

cors-vulnerable-lab

Sample vulnerable code and its exploit code

cryptomg

CryptOMG is a configurable CTF style test bed that highlights common flaws in cryptographic implementations.

cv

cv-1

:page_with_curl: Carolyn Stransky's CV

damn-vulnerable-graphql-application

Damn Vulnerable GraphQL Application is an intentionally vulnerable implementation of Facebook's GraphQL technology, to learn and practice GraphQL Security.

django.nv

Vulnerable Django Application

dvwa

Damn Vulnerable Web Application (DVWA)

dvxte

Damn Vulnerable eXtensive Training Environment

file-upload-lab

Damn Vulnerable File Upload V 1.1

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

maturity-models

Node application to help managing Maturity Models like the ones created by BSIMM and OpenSAMM

mutillidae

OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. Mutillidae can be installed on Linux and Windows using LAMP, WAMP, and XAMMP. It is pre-installed on SamuraiWTF and OWASP BWA. The existing version can be updated on these platforms. With dozens of vulnerabilities and hints to help the user; this is an easy-to-use web hacking environment designed for labs, security enthusiast, classrooms, CTF, and vulnerability assessment tool targets. Mutillidae has been used in graduate security courses, corporate web sec training courses, and as an "assess the assessor" target for vulnerability assessment software. A containerized version of the application is available as a companion project.

pyscs

Security Control Selector

pytm

A Pythonic framework for threat modeling

pytm---addendum

additional files to use with pyTM

railsgoat

A vulnerable version of Rails that follows the OWASP Top 10

ssrf_vulnerable_lab

This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack

webgoat

WebGoat is a deliberately insecure application

wrongsecrets

Examples with how to not use secrets

zxcvbn

A realistic password strength estimator.