TCP/UDP Non-HTTP Proxy Extension (NoPE) for Burp Suite.

SecurityExplained is a new series after the previous learning challenge series #Learn365. The aim of #SecurityExplained series is to create informational content in multiple formats and share with the community to enable knowledge creation and learning.

Web Application Secure Coding Handbook resource.

Vulnerable code snippets with fixes for Web2, Web3, API, iOS, Android and Infrastructure-as-Code (IaC)

A burp suite extension that reviews backup, old, temporary and unreferenced files on web server for sensitive information (OWASP WSTG-CONF-04, OTG-CONFIG-004)

this repository is a docker containing some "XSS vulnerability" challenges and bypass examples.

This repository is a dockerized PHP application containing some file upload vulnerability challenges (scenarios).

A collection of awesome framework, libraries, learning tutorials, videos, webcasts, technical resources and cool stuff about General Data Protection Regulation (GDPR).

Hybrid Encryption RSA + AES in Swift

This repository hosts DSP AppSec internal infrastructure apps deployed in GKE.

Flutter plugin to verify the integrity of the app and detect if it has been tampered at run time.

Java Agent is a Java application probe of DongTai IAST, which collects method invocation data during runtime of Java application by dynamic hooks.

SafeLock is demonstration app for how to integrate FaceID in iOS project

Optimize your web vulnerability assessments with PassiveDigger, a comprehensive Burp Suite extension that specializes in passive traffic analysis. Detect potential vulnerabilities, get actionable insights, and supercharge your security audits.

This repository is a dockerized PHP application containing some captcha logical bypass challenges (scenarios).

Pipeline SAST, DAST, SCA in GitLab CI\CD and push reports to VM

Powerful and Flexible File Validation Library for Java

Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...

postMessage() vulnerability tester