
dynast-bench
A DAST benchmark of intentionally-vulnerable apps with ground-truth answer keys for scoring scanners
api-security-testingcurated-resourceseducation+4

A DAST benchmark of intentionally-vulnerable apps with ground-truth answer keys for scoring scanners

A compact guide to network pivoting for penetration testings / CTF challenges.

A wordlist of API names for web application assessments

Curated wordlists of API function names, verbs, and nouns for fuzzing web application endpoints with Burp Suite Intruder.

Covered CVEs: CVE-2026-28755, CVE-2026-42926, CVE-2026-9256, CVE-2026-42055, CVE-2026-42533

OWASP Web Security Testing Guide RAG system with ChromaDB, MCP for Claude Code

Official Elastic Skills

Defund the Police.