Repositories list

• wrongsecrets

  Public
  Vulnerable app with examples showing how to not use secrets

  javadockerkubernetes+ 16awssecurityvaultazuregcpsecretsowasp+ 9

  Java

  •

  GNU Affero General Public License v3.0

  •412•1.3k•25•10•Updated Mar 4, 2025Mar 4, 2025

• www-chapter-berlin

  Public
  OWASP Foundation Web Respository

  HTML

  •1•1•0•0•Updated Mar 4, 2025Mar 4, 2025

• Nest

  Public
  Your gateway to OWASP. Discover, engage, and help shape the future!

  reactpythongraphql+ 11kubernetesdjangotypescriptrestdjango-rest-frameworkk8sgsoc+ 4

  Python

  •

  MIT License

  •79•54•66•21•Updated Mar 4, 2025Mar 4, 2025

• www-project-automated-threats-to-web-applications

  Public
  OWASP Foundation Web Respository

  HTML

  •23•66•2•0•Updated Mar 4, 2025Mar 4, 2025

• owasp.github.io

  Public
  OWASP Foundation main site repository

  HTML

  •

  Creative Commons Attribution Share Alike 4.0 International

  •277•565•12•7•Updated Mar 4, 2025Mar 4, 2025

• www--site-theme

  Public
  Contains owasp site theme specific items (headers, footers, json, menus)

  HTML

  •27•8•5•0•Updated Mar 4, 2025Mar 4, 2025

• www-project-threat-dragon

  Public
  OWASP Foundation Threat Dragon Project Web Repository

  security-toolsowaspappsec

  HTML

  •

  Apache License 2.0

  •30•77•3•2•Updated Mar 4, 2025Mar 4, 2025

• threat-dragon

  Public
  An open source threat modeling tool from OWASP

  owaspthreat-modelingsdlc+ 2threat-dragonowasp-threat-dragon

  JavaScript

  •

  Apache License 2.0

  •273•1k•66•2•Updated Mar 4, 2025Mar 4, 2025

• www-project-common-lifecycle-enumeration

  Public
  OWASP Foundation Web Respository

  HTML

  •

  Other

  •0•2•0•0•Updated Mar 4, 2025Mar 4, 2025

• cornucopia

  Public
  The source files and tools needed to build the OWASP Cornucopia decks in various languages

  cardcard-gamegamification+ 1threat-modeling

  Python

  •

  Other

  •26•58•9•0•Updated Mar 4, 2025Mar 4, 2025

• www-project-dojo-shield

  Public
  OWASP Foundation web repository

  HTML

  •

  Other

  •0•1•0•0•Updated Mar 4, 2025Mar 4, 2025

• www-chapter-heilbronn

  Public
  OWASP Foundation web repository

  HTML

  •0•0•0•0•Updated Mar 4, 2025Mar 4, 2025

• wrongsecrets-ctf-party

  Public
  Run Capture the Flags and Security Trainings with OWASP WrongSecrets

  gitdockerkubernetes+ 6awssecurityctftraining-materialsctfdhacktoberfest

  JavaScript

  •

  Apache License 2.0

  •142•43•8•15•Updated Mar 4, 2025Mar 4, 2025

• www-chapter-saitama

  Public
  OWASP Foundation Web Respository

  HTML

  •2•2•5•0•Updated Mar 4, 2025Mar 4, 2025

• www-chapter-bangalore

  Public
  OWASP Foundation Web Respository for

  CSS

  •22•0•0•0•Updated Mar 4, 2025Mar 4, 2025

• www-chapter-germany

  Public
  OWASP Foundation Web Respository

  HTML

  •27•18•0•0•Updated Mar 4, 2025Mar 4, 2025

• O-Saft

  Public
  O-Saft - OWASP SSL advanced forensic tool

  tlssslcertificate+ 2ciphersperl

  Perl

  •

  GNU General Public License v2.0

  •86•375•10•1•Updated Mar 4, 2025Mar 4, 2025

• owasp-mastg

  Public
  The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

  static-analysisandroid-applicationios-app+ 16dynamic-analysispentestingmobile-securitynetwork-analysismastreverse-enginneringruntime-analysis+ 9

  Python

  •

  Creative Commons Attribution Share Alike 4.0 International

  •2.4k•12k•313•35•Updated Mar 4, 2025Mar 4, 2025

• www-project-operational-technology-top-10

  Public
  OWASP Foundation web repository

  HTML

  •

  Creative Commons Attribution Share Alike 4.0 International

  •5•8•10•1•Updated Mar 4, 2025Mar 4, 2025

• ASVS

  Public
  Application Security Verification Standard

  HTML

  •

  Creative Commons Attribution Share Alike 4.0 International

  •684•2.9k•63•5•Updated Mar 4, 2025Mar 4, 2025

• www-chapter-hong-kong

  Public
  OWASP Foundation Web Respository

  HTML

  •1•2•0•0•Updated Mar 4, 2025Mar 4, 2025

• crAPI

  Public
  completely ridiculous API (crAPI)

  apiowasphacktoberfest+ 1apisecurity

  Java

  •

  Apache License 2.0

  •376•1.2k•35•22•Updated Mar 4, 2025Mar 4, 2025

• www-event-chapters-all-day

  Public
  0•0•0•0•Updated Mar 4, 2025Mar 4, 2025

• www-community

  Public
  OWASP Community Pages are a place where OWASP can accept community contributions for security-related content.

  appseccommunity-projectowasp

  HTML

  •713•1.2k•11•2•Updated Mar 4, 2025Mar 4, 2025

• www-board

  Public
  HTML

  •12•5•0•0•Updated Mar 4, 2025Mar 4, 2025

• www-chapter-augsburg

  Public
  OWASP Foundation Web Respository

  HTML

  •0•2•0•0•Updated Mar 3, 2025Mar 3, 2025

• www-project-top-10-for-large-language-model-applications

  Public
  OWASP Foundation Web Respository

  TeX

  •

  Other

  •171•671•25•3•Updated Mar 3, 2025Mar 3, 2025

• www-project-hactu8

  Public
  OWASP Foundation web repository

  HTML

  •

  Other

  •1•0•0•0•Updated Mar 3, 2025Mar 3, 2025

• www-chapter-montreal

  Public
  OWASP Foundation Web Respository

  HTML

  •2•2•0•0•Updated Mar 3, 2025Mar 3, 2025

• www-project-pci-dss-toolkit

  Public
  OWASP Foundation web repository

  HTML

  •

  Other

  •0•0•0•0•Updated Mar 3, 2025Mar 3, 2025