appsecurity 开源项目推荐（46 个）

summitt /Nope-Proxy

Burp套件的传输协议/SDP非http代理扩展（NoPE）。

harsh-bothra /SecurityExplained

SecurityExplained is a new series after the previous learning challenge series #Learn365. The aim of #SecurityExplained series is to create informational content in multiple formats and share with the community to enable knowledge creation and learning.

joswha /Secure-Coding-Handbook

Web Application Secure Coding Handbook resource.

yevh /VulnPlanet

Vulnerable code snippets with fixes for Web2, Web3, API, iOS, Android and Infrastructure-as-Code (IaC)

moeinfatehi /Backup-Finder

Burp Suite extension (BApp Store) that finds backup, old, temporary and unreferenced files leaking sensitive data on web servers. OWASP WSTG-CONF-04.

moeinfatehi /xss_vulnerability_challenges

Dockerized PHP lab with XSS (cross-site scripting) challenges and filter-bypass examples for practising web exploitation.

moeinfatehi /file_upload_vulnerability_scenarios

Dockerized PHP lab with file upload vulnerability challenges: bypass upload filters to achieve remote code execution.

ErSilh0x /WildWebApps

Understand web vulnerabilities with WildWebApps! Multi-language vulnerable/fixed code, OWASP Top 10 mapping, attack-path diagrams, and a runnable offline lab for each (SQLi, XSS, and more). For cybersecurity, AppSec, SOC, pentesters.

TheDeepOpc /deepsec

该项目在 GitHub 上没有填写描述

mrofcodyx /noxdroid

Android Pentest Framework

githubabcs-devops /gh-advsec-devsecops

Agentic AI for DevSecOps: Transforming Security with GitHub Advanced Security and GitHub Copilot. GitHub Advanced Security - DevSecOps Guidelines - Unified visibility into DevOps security posture. DevSecOps E2E Demos.

paulveillard /cybersecurity-gdpr-compliance

A collection of awesome framework, libraries, learning tutorials, videos, webcasts, technical resources and cool stuff about General Data Protection Regulation (GDPR).

mehrankmlf /SecurePacketEnvelope

Hybrid Encryption RSA + AES in Swift

romikavinda /app_integrity_checker

Flutter plugin to verify the integrity of the app and detect if it has been tampered at run time.

righettod /code-snippets-security-utils

Provides different utilities methods to apply processing from a defensive security perspective.

Splinters-io /ghosted

Ghosted is a Trust Erosion scanner, pulling domains from your CSP checking if they're available to buy.

broadinstitute /dsp-appsec-infrastructure-apps

This repository hosts DSP AppSec internal infrastructure apps deployed in GKE.

whitespots /boomer

Tiny BOM generator for your CI

programmer443 /NFSSecurity

Modern, modular Swift framework for iOS/macOS security: encryption, hashing, biometrics, keychain, jailbreak detection, integrity, network, random, and more.

moeinfatehi /PassiveDigger

Burp Suite extension for passive vulnerability detection: flags SQL errors, reflected parameters (XSS), LFI hints, weak cookie flags and missing security headers.