applicationsecurity

AspGoat is an intentionally vulnerable ASP.NET Core application for learning and practicing web application security.

🔒 Intentionally vulnerable ASP.NET Core app for hands-on web security & penetration testing practice

AI-powered security code analysis and vulnerability scanner built with modern AI models and OWASP best practices.

urlyzer is a URL parsing analysis tool.

PathFinder is a tool designed to visualize call graphs of source code.

free website fivem server + Whitelist applications

🏴‍☠️ BST is an ever-evolving collection of 🛠 tools to help in security and administration tasks 😉

Automated Security testing using ZAP Python API. This can be used with any functional UI automation tool.

A collection of AppSec case studies on business logic flaws and insecure design scenarios.

AiShields is an open-source Artificial Intelligence Data Input and Output Sanitizer

A REST API and optional browser UI for exploring package dependencies.

Cross-platform Python scanner for indicators of compromise from the axios npm supply chain attack (2026-03-31), attributed to DPRK-linked threat actor UNC1069.

Custom PortSwigger Burp Suite extensions

Maven Repo Used for Extending Faction.

This Application Security and DevSecOps wiki is made to keep all resources, links, articles, researches in one place.

A Cybersecurity Book Collection for domains: Network Security, Application Security, Cloud Security, Penetration Testing, Digital Forensics, Cryptography & more.

A (purpousely) vulnerable, social-media-like, django web application

By injecting a malicious XML document containing an external entity, I was able to force the server to process a local file reference. The application returned the contents of the requested system file in the HTTP response, confirming **Arbitrary Local File Disclosure**.

Uma maneira beeem simples de demonstrar segurança ao utilizar APIs!