appsec-tutorials 开源项目推荐（22 个）

jassics /security-study-plan

基于渗透测试、应用安全、云安全、DevSecOps 等角色，成为成功网络安全工程师的完整实用学习计划……

roottusk /vapi

vAPI 是 Vulnerable Adversely Programmed Interface，一种可自托管的 API，通过练习模拟 OWASP API Top 10 场景。

HXSecurity /DongTai-agent-java

Java Agent 是东台 IAST 的一个 Java 应用探针，通过动态钩子在 Java 应用运行时收集方法调用数据。

yevh /VulnPlanet

Vulnerable code snippets with fixes for Web2, Web3, API, iOS, Android and Infrastructure-as-Code (IaC)

security-prince /Resources-for-Application-Security

Some good resources for getting started with application security

filipkarc /sqli-postgres-rce-privesc-hacking-playground

Application with SQL Injection vulnerability and possible privilege escalation. Free vulnerable app for ethical hacking / penetration testing training.

we45 /ZAP-Mini-Workshop

Interactive IPython Notebook to demonstrate OWASP ZAP's API and Scripting Functions - OWASP ZAP 2.8.0

SecuringTheStack /tutorials

Additional Resources For Securing The Stack Tutorials

HXSecurity /DongTai-Plugin-IDEA

Dongtai-plugin-idea is an IDEA plug-in developed by DongTai team for Java Web application developers. This plug-in provides functions such as vulnerability detection and code audit during application development, enabling developers to find application vulnerabilities more intuitively, quickly and in real time during application development.

geminishkv /course_labs

Лабораторные работы по курсам для AppSec, Risk Analysis, Securty Champion: Toolchain, Orchestration, CI/CD, UML, etc.

rstatsinger /contrast-java-webgoat-docker

Contrast Security Instrumentation for Dockerized Webgoat, with lab instructions.

HXSecurity /DongTai-engine

This repository has been merged into https://github.com/HXSecurity/DongTai. DongTai-engine used to analyze the method data collected by the probe, analyze whether there are vulnerabilities in API requests through the algorithm of taint tracking, and is also responsible for timing tasks, including: expired log cleaning, probe state maintenance, …

zzzteph /appsec.study

List of vulnerable machines for testing and training. Nothing more. Nothing less.

geminishkv /oss_toolchainmap

Карта инструментов AppSec, которая дает возможность выбрать выгодные для себя решения под все необходимые ситуации: когда нет денег, когда не можем интегрировать большой инструмент, когда никого нет и приходится делать все одному и тд.

wooyeol /reactnative_appsec

React Native AppSec Sample

jeroenvdmeer /cyberescaperoom

A playful introduction to web application vulnerabilities in the OWASP Top 10 while relying only on developer tools offered by modern web browsers.

thegoodparts /appsec

The Good Parts of Application Security: learn how to build and test secure webapps

tienanh1211 /Study-Planner

Collaborate effectively with the Study Planner app. Organize study groups, track tasks, and chat in real-time. 🌟📅 Join us on GitHub!

MyNamesWaltuh /Study-Planner

📘 Organize your study schedule with Study Planner, a simple web app that helps students manage their time and subjects effectively.

whitespots /devsecops-docs

我们的文档