ajaynegi-websecresearch Goto Github PK

owasp-learning-gateway

OWASP Learning Gateway Project will be a collaborative learning platform to support OWASP Mentors Initiatives. We are currently designing the platform and planning development.

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering.

owasp-testing-checklist

OWASP based Web Application Security Testing Checklist is an Excel based checklist which helps you to track the status of completed and pending test cases.

owasp-testing-guide-v5

owtf

Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient @owtfp http://owtf.org

python-burp-rest-api

Python Package for burprestapi

repo-security-scanner

CLI tool that finds secrets accidentally committed to a git repo, eg passwords, private keys

security-testing-class

example code and lab environment for the the Security Testing class in the Lynda and LinkedIn Learning library

susanoo

A REST API security testing framework.

tbhm

The Bug Hunters Methodology

threat-model-cookbook

Repo to hold threat models samples and templates

top-5-machine-learning-risks

The OWASP Top 5 Machine Learning Risks[edit | edit source] The idea is to build the required resources which help software security community to understand the emerging technology of machine learning and how it is related to security, warn them about the risk associated with using ML, and discuss the defending techniques. Description[edit | edit source] Machine Learning has recently re-emerged as a powerful tool in multiple business sectors, especially when it is used for Predictive Analytics at the scale of Big Data. This technique becomes vital when it is harnessed for the Security services and applications like Fraud Detection, Anomaly Detection, Behavioral Analysis

trufflehog

Searches through git repositories for high entropy strings and secrets, digging deep into commit history

webbreaker

Dynamic Application Security Test Orchestration (DASTO)

whoisip

This takes list of IP Addresses from test.txt file to collect information and generate .csv file.

wpscan

WPScan is a free, for non-commercial use, black box WordPress vulnerability scanner written for security professionals and blog maintainers to test the security of their sites.