neatsun,github

aws_org_explorer

Create a Neo4J graph of users and roles trust policies within an AWS Organization.

OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually exploitable, it’s a fair test for any kind of vulnerability detection tool. For more details on this project, please see the OWASP Benchmark Project home page.

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

cpython

The Python programming language

ctf

ctf prep

dodgy

Looks at Python code to search for things which look "dodgy" such as passwords or diffs

drawio-threatmodeling

Draw.io libraries for threat modeling diagrams

elasticsearch

Free and Open, Distributed, RESTful Search Engine

fluxion

FLUXION

gitrob

Reconnaissance tool for GitHub organizations

guava

Google core libraries for Java

jackson-core

Core part of Jackson that defines Streaming API as well as basic shared abstractions

jackson-databind

General data-binding package for Jackson (2.x): works on streaming API (core) implementation(s)

jit

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

junit4

A programmer-oriented testing framework for Java.

mecha-docs

Documentation for the Mechanical Phish.

microservices-demo

Sample cloud-native application with 10 microservices showcasing Kubernetes, Istio, gRPC and OpenCensus.

moloch_installer

Ubuntu install scripts for http://github.com/aol/moloch

nodegoat

The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.