Node application to help managing Maturity Models like the ones created by BSIMM and OpenSAMM

OWASP Web Application Security Testing Checklist

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Web Fuzzer

Automatic SQL injection and database takeover tool

Allows you to crack hashes with or without wordlist.

Changes the current Ruby

Checklist of the most important security countermeasures when designing, testing, and releasing your API

A list of web application security

John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs

⚡️ Express inspired web framework written in Go

☁️ Live reload for Go apps

A language for writing HTML user interfaces in Go.

A Go port of Ruby's dotenv library (Loads environment variables from .env files)

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

Nikto web server scanner

Manage your app's Ruby environment

A collection of useful .gitignore templates

Nokogiri (鋸) makes it easy and painless to work with XML and HTML from Ruby.

Daemon to ban hosts that cause multiple authentication errors

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

Terraform enables you to safely and predictably create, change, and improve infrastructure. It is a source-available tool that codifies APIs into declarative configuration files that can be shared …

Full-automated dynamic vulnerability scanning tool for Ruby on Rails project

Utility and component-centric design system leveraging Bootstrap 5 for rapid, responsive UI development.

Using the Google Maps API with django model admin

script for Pythonista3 breaking down kanji use in a text file.

Source code for Apache/mod_wsgi.

Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.

A list of public penetration test reports published by several consulting firms and academic security groups.