The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
-
Updated
Oct 30, 2026 - JavaScript
#
appsec
Here are 221 public repositories matching this topic...
safely install npm packages by auditing them pre-install stage
nodejs npm security package-manager security-audit best-practices command-line-tool vulnerabilities appsec vulnerability-scanners security-tools supply-chain-security
-
Updated
Oct 29, 2026 - JavaScript
njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.
nodejs lint python security semantic linter static-analysis expressjs jslint static-analyzer codereview appsec staticanalysis security-tools devsecops sast nodesecurity nodejsscan codescanner njsscan
-
Updated
Oct 27, 2026 - JavaScript
Claude Code skill for OWASP security best practices (2025-2026). Includes Top 10:2025, ASVS 5.0, Agentic AI security, and 20+ language-specific security quirks.
-
Updated
Sep 25, 2026 - JavaScript
This repo contains the code for my secure code review challenges. People used this as the primary resource to pass FAANG AppSec interviews 😉
-
Updated
Oct 7, 2026 - JavaScript
Simple tool to scan a website for (DOM-based) XSS vulnerabilities and Open Redirects.
-
Updated
Feb 10, 2025 - JavaScript
Interact with Frida devices, processes, and scripts directly from your browser.
lightweight infosec frida appsec local-first frida-hooking frida-python appsec-tools android-security-tools frida-ui
-
Updated
Mar 8, 2026 - JavaScript
Session Hijacking Visual Exploitation
-
Updated
Mar 7, 2024 - JavaScript
OWASP SecurityRAT (version 1.x) - Tool for handling security requirements in development
-
Updated
Aug 28, 2025 - JavaScript
A Tool for Domain Flyovers
golang security osint hacking penetration-testing bug-bounty infosec pentesting bugbounty pentest appsec hacking-tool security-tools reconnaissance
-
Updated
Nov 20, 2024 - JavaScript
Mobile application security testing toolkit for Android, iOS & Flutter — ready-to-use FRIDA scripts (SSL pinning, root & anti-debug bypass, crypto monitoring), a full testing methodology, and hands-on guides.
android ios penetration-testing pentesting flutter frida appsec security-testing mobile-application-security mobile-application-security-testing ssl-pinning-bypass
-
Updated
Jul 27, 2025 - JavaScript
AspGoat is an intentionally vulnerable ASP.NET Core application for learning and practicing web application security.
docker open-source csharp dotnet penetration-testing bug-bounty asp-net-core appsec hacktoberfest owasp-top-10 contributions-welcome webapplicationhacking good-first-issue ai-security applicationsecurity productsecurity ai-red-team prompt-injection llm-security ai-red-teaming
-
Updated
Oct 29, 2025 - JavaScript
A local MCP runtime that attacks what you own and only reports what it proved. 17 CVEs across 9 projects came out of this repo. Install: npx -y hacker-bob@latest install /path/to/project, then run /bob-evaluate target.com
security mcp fuzzing pentesting cve appsec offensive-security smart-contract-security model-context-protocol claude-code
-
Updated
Oct 24, 2026 - JavaScript
Audit your GitHub Actions workflow runs to see exactly which Actions were downloaded
-
Updated
Oct 20, 2026 - JavaScript
Presentations, training modules, and other education materials from Duo Security's Application Security team.
-
Updated
Jul 15, 2021 - JavaScript
Zero trust. Zero security. Total exposure. A deliberately vulnerable health tech platform with AI Chatbot for learning about application security and ethical hacking. It contains vulnerabilities from OWASP top 10 Web, API and AI/LLM Security Vulnerabilities. Highly vulnerable, never use in production.
-
Updated
Mar 27, 2026 - JavaScript
✨ A customizable copilot-instructions.md ruleset & prompts to guide GitHub Copilot toward secure coding defaults in Java, Node.js, C# and Python. Blocks risky patterns, teaches safe habits.
-
Updated
May 17, 2026 - JavaScript
A low-cost approach to testing AI chat experiences and security concepts
-
Updated
May 30, 2026 - JavaScript
Add this topic to your repo
To associate your repository with the appsec topic, visit your repo's landing page and select "manage topics."