applicationsecurity

AspGoat is an intentionally vulnerable ASP.NET Core application for learning and practicing web application security.

AI-powered security code analysis and vulnerability scanner built with modern AI models and OWASP best practices.

🔒 Intentionally vulnerable ASP.NET Core app for hands-on web security & penetration testing practice

urlyzer is a URL parsing analysis tool.

free website fivem server + Whitelist applications

PathFinder is a tool designed to visualize call graphs of source code.

🏴‍☠️ BST is an ever-evolving collection of 🛠 tools to help in security and administration tasks 😉

Automated Security testing using ZAP Python API. This can be used with any functional UI automation tool.

A collection of AppSec case studies on business logic flaws and insecure design scenarios.

AiShields is an open-source Artificial Intelligence Data Input and Output Sanitizer

A REST API and optional browser UI for exploring package dependencies.

Cross-platform Python scanner for indicators of compromise from the axios npm supply chain attack (2026-03-31), attributed to DPRK-linked threat actor UNC1069.

Custom PortSwigger Burp Suite extensions

Maven Repo Used for Extending Faction.

This Application Security and DevSecOps wiki is made to keep all resources, links, articles, researches in one place.

A Cybersecurity Book Collection for domains: Network Security, Application Security, Cloud Security, Penetration Testing, Digital Forensics, Cryptography & more.

A (purpousely) vulnerable, social-media-like, django web application

Secure File Reader is a Python-based tool that defends against directory traversal attacks by restricting file access strictly to a designated safe directory. It ensures robust verification of requested file paths, preventing unauthorized access to sensitive system files and enhancing application security.

During security testing, the user profile update request was analyzed to determine how profile information was processed. It was observed that the request contained a parameter representing the user's role. By intercepting the request and modifying this parameter before forwarding it to the server