Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

🔒 Memorable site for testing clients against bad SSL configs.

Scripts to help work with configuration audit files

Scan for vulnerabilities in JavaScript libraries you use (Python port of retirejs)

A list of open source web security scanners

A pure-python fully automated and unattended fuzzing framework.

Open Source Cloud Native Application Protection Platform (CNAPP)