
CheatSheetSeries
The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.


The Secure Coding Practices Quick-reference Guide from OWASP

⚠️ This repo is no longer in use. Please refer to https://github.com/OWASP/www-project-vulnerable-web-applications-directory

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

Curated directory of Node.js security tools, static analyzers, vulnerability scanners, and educational resources covering OWASP Top 10, supply chain…

The most comprehensive LLM + MCP security guide i.e. OWASP aligned, real CVEs, actionable checklists

A curated list of resources for learning about application security

😎 🔗 Awesome list about all kinds of resources for learning Ethical Hacking and Penetration Testing.

A comprehensive guide for web application penetration testing and bug bounty hunting, covering methodologies, tools, and resources for identifying…

A collection of awesome platforms, blogs, documents, books, resources and cool stuff about security

Some good resources for getting started with application security

Open-source prompt injection attack console. Test AI security by firing categorized attacks at any endpoint.

Comprehensive OWASP guide for mobile app security testing, reverse engineering, and verifying MASVS/MASWE weaknesses through static, dynamic, and…

Official OWASP Top 10 Document Repository

The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how…

OWASP iGoat - A Learning Tool for iOS App Pentesting and Security by Swaroop Yermalkar

Vendor-neutral OWASP project mapping quantum-era security risks with a Top 10 risk list, mitigation guidance, and threat models for post-quantum…