Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

Application security best practices and code implementations for Java developers. This project is intended for didactic purposes only, supporting my training course.

The ZAP by Checkmarx Core project

ZAP Add-ons

API Security Vulnerability Scanner designed to help you secure your APIs.

⚙️ A curated list of dynamic analysis tools and linters for all programming languages, binaries, and more.

SecHub provides a central API to test software with different security tools.

Continuation of the ZAP Neonmarker add-on previously by Juha Kivekäs

A collection of ZAP scripts and tips provided by the community - pull requests very welcome!

SOOS DAST - The affordable no limit web vulnerability scanner

Probely's GitHub Action

Integrate our security scans with your Jenkins CI/CD pipeline

The infrastructure for the benchmark includes a set of Vulnerable by Design (VbD) Targets of Evaluation (ToEs) used to measure the speed and accuracy of automated Application Security Testing (AST) tools.

xAST评价体系，让安全工具不再“黑盒”. The xAST evaluation benchmark makes security tools no longer a "black box".

Master's thesis. Microservices based e-commerce application. This is the basis for my master's thesis topic, which is software testing. These tests are unit, functional, SAST, DAST, integration, performance, acceptance and security tests of container images.

A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestration

Collection of reusable workflows

⚡ Fast Web Security Scanner written in Rust based on Lua Scripts 🌖 🦀

A GitHub Action for running the ZAP Baseline scan

A GitHub Action for running the ZAP API scan