#夺旗赛 (CTF) 和网络安全资源#OWASP Juice Shop：可能是最不安全的现代化，复杂的网站。用于漏洞学习目的，包含多种热门安全漏洞。
A comprehensive guide for web application penetration testing and bug bounty hunting, covering methodologies, tools, and resources for identifying and exploiting vulnerabilities.
OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. This is an easy-to-use web hacking environment designed for labs, secu...
翻译 - OWASP Mutillidae II是一个免费的，开放源代码，故意易受攻击的Web应用程序，它是Web安全爱好者的目标。可以使用LAMP，WAMP和XAMMP将Mutillidae安装在Linux和Windows上。它已预安装在SamuraiWTF和OWASP BWA上。可以在这些平台上更新现有版本。具有数十个漏洞和提示来帮助用户；这是一个易于使用的Web黑客环境，设计用于实验室，安全爱好者，教室，CTF和漏洞评估工具目标。 Mutillidae已用于研究生安全课程，公司网络sec培训课程中，并作为漏洞评估软件的“评估评估者”目标。
Proactive, Open source API security → API discovery, API Security Posture, Testing in CI/CD, Test Library with 1000+ Tests, Add custom tests, Sensitive data exposure
vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios through Exercises.
翻译 - vAPI 是易受攻击的不利编程接口，它是一种自我托管的 API，它以练习的方式模仿 OWASP API 前 10 名场景。
#学习与技能提升#A Huge Learning Resources with Labs For Offensive Security Players
A laboratory for learning secure web and mobile development in a practical manner.
翻译 - 以实用的方式学习安全Web开发的实验室。
Damn Vulnerable NodeJS Application
翻译 - 该死的脆弱的NodeJS应用程序
Security compliance platform - SOC2, CMMC, ASVS, ISO27001, HIPAA, NIST CSF, NIST 800-53, CSC CIS 18, PCI DSS, SSF tracking. https://gapps.darkbanner.com
OWASP iGoat (Swift) - A Damn Vulnerable Swift Application for iOS
Think of Local sheriff as a recon tool in your browser (WebExtension). While you normally browse the internet, Local Sheriff works in the background to empower you in identifying what data points (PII...
#新手入门#Roadmap for Web Application Penetration Testing | FREE Resources (Not Pirated)
Enhance the security of your web applications effortlessly with AWS Firewall Factory. Safeguard your valuable assets through seamless WAF deployment, updates, and staging, all centrally managed with A...
Bypass 4xx HTTP response status codes and more. The tool is based on Python Requests, PycURL, and HTTP Client.
🚀 Join us for 30days of daily API security tests. #30days30tests We've spent last 120days building amazing API security tests for the community. Next 30 days we will post test tutorials here.
OWASP ASST (Automated Software Security Toolkit) | A Novel Open Source Web Security Scanner.
A burp suite extension that reviews backup, old, temporary and unreferenced files on web server for sensitive information (OWASP WSTG-CONF-04, OTG-CONFIG-004)
#安卓#Vulnerable code snippets with fixes for Web2, Web3, API, iOS, Android and Infrastructure-as-Code (IaC)
API Security Vulnerability Scanner designed to help you secure your APIs.