The ZAP by Checkmarx Core project

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

TCP/UDP Non-HTTP Proxy Extension (NoPE) for Burp Suite.

Oversecured Vulnerable Android App

Integrates Dependency-Check reports into SonarQube

OWASP VulnerableApp Project: For Security Enthusiasts by Security Enthusiasts.

SecHub provides a central API to test software with different security tools.

The ZAP Heads Up Display (HUD)

Java web and command line applications demonstrating various security topics

A simple Java command-line utility to mirror the CVE JSON data from NIST.

Jenkins plugin for OWASP Dependency-Check. Inspects project components for known vulnerabilities (e.g. CVEs).

Vulnerable Client-Server Application (VuCSA) is made for learning how to perform penetration tests of non-http thick clients. It is written in Java (with JavaFX graphical user interface) and contains multiple challenges including SQL injection, RCE, XML vulnerabilities and more.

A Java library for parsing and programmatically using threat models

This extension adds a search bar to the Repeater tab that can be used to highlight all repeater tabs where the request and/or response matches a query via simple text matching or Regex.

Ziti SDK for JVM

Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. Sugar-Free and Secure: no any external dependencies except for chart plotting are used

A simple Java command-line utility to mirror the entire contents of VulnDB.

Main repository for the official Dependency-Track Jenkins plugin

Vendor-Neutral Security Tool Automation Controller (over REST)

A BurpSuite extension for vulnerability Scanning