owasp
Here are 263 public repositories matching this topic...
A collection of hacking / penetration testing resources to make you better!
-
Updated
Dec 14, 2019
Is your feature request related to a problem? Please describe.
Describe the solution you'd like
In addition to:
Summary of Alerts
Provide:
Kinds of Alerts
| Kind | Number of Alerts |
|---|---|
| X-Frame-Options Header Not Set | 1 |
| Incomplete or No Cache-control and Pragma HTTP Header Set | 8 |
| ... | ... |
The link for a given kind could be to the first instance of that alert, a
A curated list of resources for learning about application security
-
Updated
Dec 13, 2019 - PHP
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
-
Updated
Dec 14, 2019 - JavaScript
bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
-
Updated
Dec 13, 2019 - Go
Documentation
I would like to see documentation for using Astra with most popular authentication/token methods. So much work but just one page of documentation. Please update this so it gets more widely used and more feedback on the product this way. Thanks
The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
-
Updated
Dec 13, 2019 - Java
Bug description
When importing a burp report via the APIv1 , some findings can have a request but no response , when this happens , due to burpResponseBase64 being not null in the db , issues will only be imported until hitting that certain request without a response .
This can happen with any importer mostly .
The problem is from the fact that both burp req and resp are simple `models.Bi
Python Themis Docs
Hi, I love encryption, but I found the docs to be confusing for Python. Maybe it's just Themis in general, so please correct me if I'm wrong since this is my first time using Themis.
Here is the confusing part: https://github.com/cossacklabs/themis/wiki/Python-Howto#example-1
When you're unwrapping the message, you need to u
I did a basic line edit of the "Usage" section, but next it needs reorganization and more information.
Would anyone want to spend time on a call or two to help me understand some of the commands? Some of them aren't obvious to me from the command line help, so they might benefit from better explanation.
(I'll continue to work on this section, but having a technical expert to answer some of
A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.
-
Updated
Dec 8, 2019 - Python
References and inline links throughout the documents need to be updated, as there are many old/outdated links. We have to ensure that each link provided in the reference section fits the topic discussed.
Also, it would be better to have HTTPS URLs.
🔗 All the resources I could find for learning Ethical Hacking and Penetration Testing.
-
Updated
Dec 12, 2019
Example from https://docs.microsoft.com/en-us/dotnet/api/system.web.httprequest?view=netframework-4.7.2
public partial class RestrictedPage : Page
{
protected void Page_Load(object sender, EventArgs e)
{
if (!Request.IsAuthenticated)
{
var rawUrl = Request.RawUrl;
Response.Redirect("/Account/Login?ru=" + Server.HtmlEncodeOWSAP Damn Vulnerable Web Sockets (DVWS) is a vulnerable web application which works on web sockets for client-server communication.
-
Updated
Oct 30, 2019 - PHP
Improve this page
Add a description, image, and links to the owasp topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the owasp topic, visit your repo's landing page and select "manage topics."
When you're viewing a cheatsheet on the https://cheatsheetseries.owasp.org website it isn't immediately obvious that the content is pulled from GitHub, or how you could contribute to the project on the cheatsheets themselves (although there is a note at the bottom of the homepage).
Making this more obvious in the sheets themselves will encourage people to contribute (or at least raise issues).