The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

A curated list of resources for learning about application security

Next generation web scanner

Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...

🎯 Command Injection Payload List

Security automation content in SCAP, Bash, Ansible, and other formats

XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.

Metlo is an open-source API security platform.

This repository is about @harshbothra_'s 365 days of Learning Tweets & Mindmaps collection.

Curating the best DevSecOps resources and tooling.

JANUSEC Application Gateway provides secure access, including reverse proxy, K8S Ingress Controller, Automatic ACME Certificate, WAF, 5-Second Shield, CC Defense, OAuth2 Authentication, Global Server Load Balance, and Cookie Compliance etc. JANUSEC应用网关，提供安全的接入，包括反向代理、K8S Ingress Controller、自动化ACME证书、WAF、5秒盾、CC防御、OAuth2身份认证、GSLB负载均衡与Cookie合规等。

A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis

Awesome PHP Security Resources 🕶🐘🔐

Open-Source Security Architecture | 开源安全架构

Course content, lab setup instructions and documentation of our very popular Breaking and Pwning Apps and Servers on AWS and Azure hands on training!

Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests

Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.

🔥 A curated list of awesome links related to application security related to the environments with NGINX or Kubernetes Ingres Controller (based on NGINX)