The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.

secureCodeBox (SCB) - continuous secure delivery out of the box

Bugbounty scope tool

The repository for my Home Assistant Supervisor Add-ons.

OWASP VulnerableApp Project: For Security Enthusiasts by Security Enthusiasts.

Zed Attack Proxy Scripts for finding CVEs and Secrets.

Integrates OWASP Zed Attack Proxy reports into SonarQube

Demo - how to easily build security testing for Web App, using Zap and Glue

VulnerableApp-facade is probably most modern lightweight distributed farm of Vulnerable Applications built for handling wide range of vulnerabilities across tech stacks.

A security tool designed to perform thorough scans on a target using OpenVAS, Zap, and Nexpose. It seamlessly consolidates and integrates the scan results, providing a comprehensive overview of the security vulnerabilities identified.

Interactive IPython Notebook to demonstrate OWASP ZAP's API and Scripting Functions - OWASP ZAP 2.8.0

QuickStart template targeted for OpenShift.

This is a collection of ZAProxy Automation Tools and scripts to automate security tests of WEB Applications and WEB Sites

La intención de la workshop es mostrar y orientar a los equipos de desarrollo, seguridad y devops (entre otros) que quieran comenzar en DevSecOps, a segurar sus aplicaciones o bien a conocer un poco más acerca del desarrollo seguro, para esto, estaremos otorgando algunos tips e información que fuimos aprendiendo para armar un Pipeline DevSecOps …

Ansible module for OWASP ZAP using Python API to scan web targets for security issues

Advanced use of WPScan (WordPress Security Scanner) with other tools like nmap, nikto, owasp-zap, ids for ethnical Hackers

JAVA Clean template clean architecture, feature toggles and test pyramid

OWASP ZAP add-on to detect reflected parameter vulnerabilities efficiently

Store ZAP reports historically and compare current ZAP results against the most recent for changes in alerts.