The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.

secureCodeBox (SCB) - continuous secure delivery out of the box

The repository for my Home Assistant Supervisor Add-ons.

OWASP VulnerableApp Project: For Security Enthusiasts by Security Enthusiasts.

Zed Attack Proxy Scripts for finding CVEs and Secrets.

Integrates OWASP Zed Attack Proxy reports into SonarQube

Demo - how to easily build security testing for Web App, using Zap and Glue

VulnerableApp-facade is probably most modern lightweight distributed farm of Vulnerable Applications built for handling wide range of vulnerabilities across tech stacks.

Security Tool which scans a target using OpenVAS, Zap, and Nexpose. And consolidates the scan result.

Interactive IPython Notebook to demonstrate OWASP ZAP's API and Scripting Functions - OWASP ZAP 2.8.0

QuickStart template targeted for OpenShift.

This is a collection of ZAProxy Automation Tools and scripts to automate security tests of WEB Applications and WEB Sites

La intención de la workshop es mostrar y orientar a los equipos de desarrollo, seguridad y devops (entre otros) que quieran comenzar en DevSecOps, a segurar sus aplicaciones o bien a conocer un poco más acerca del desarrollo seguro, para esto, estaremos otorgando algunos tips e información que fuimos aprendiendo para armar un Pipeline DevSecOps …

Ansible module for OWASP ZAP using Python API to scan web targets for security issues

JAVA Clean template clean architecture, feature toggles and test pyramid

Store ZAP reports historically and compare current ZAP results against the most recent for changes in alerts.

OWASP ZAP add-on to help find reflected parameter vulnerabilities

Vulnerable Application written in PHP

Simple OWASP-ZAP API that makes spider and scanner in your web application.