AppSec Experiments Repository

A collection of security experiments covering web, mobile, API, AI, automation, and DevSecOps security research.

Table of Contents

• Overview
• Experiment Categories
  • Web Security
  • Mobile Security
  • API Security
  • AI Security
  • Security Automation
  • DevSecOps
• Getting Started
• Contributing
• License

Overview

This repository showcases practical security experiments across multiple domains including web, mobile, API, and AI security, with a focus on automation and DevSecOps practices. Each experiment includes documentation, code samples, and findings.

Experiment Categories

Web Security

• OWASP Top 10 Vulnerabilities Demo
• Modern Web Application Firewall Testing
• Secure Code Review Examples
• Web Application Fuzzing

Mobile Security

• Android Reverse Engineering
• iOS Runtime Manipulation

API Security

• REST API Fuzzing
• GraphQL Security Testing
• API Secure Code Review

AI Security

• Prompt Injection Attacks
• Model Evasion Techniques

Security Automation

• Custom Security Scanner
• Docker-based OpenGrep Setup

DevSecOps

• CI/CD Pipeline Security Testing
• Infrastructure as Code Security

License

MIT License - See LICENSE for details