HYSEN LABS DIRECTORY
Verified repositories, classifications and analysis from the OWASP organization.
GitHub describes it as The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.. The repository metadata lists Python as its primary language. The metadata lists the CC-BY-SA-4.0 license. This article stays within the project description and details documented in the GitHub repository README.
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
Official OWASP Top 10 Document Repository
Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
Application Security Verification Standard
The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.
OWASP API Security Project
The OWASP Developer Guide
An open source threat modeling tool from OWASP. [ ][build] [ ][latest] [ ][practices] OWASP Threat Dragon [OWASP][owasp] [Threat Dragon][project] is a free, open-source, cross-platform threat modeling application.
completely ridiculous API (crAPI)
OWASP Top 10 for Large Language Model Apps (Part of the GenAI Security Project)
Vulnerable app with examples showing how to not use secrets
Web and mobile application security training platform
OWASP Community Pages are a place where OWASP can accept community contributions for security-related content.
A Pythonic framework for threat modeling
Takes third-party HTML and produces HTML that is safe to embed in your web application. Fast and easy to configure.
A vulnerable version of Rails that follows the OWASP Top 10
OWASP Foundation web repository
Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.