QRLJacking
owasp/qrljackingSocial engineering attack vector and exploitation framework for hijacking user sessions via QR code login, targeting web applications like WhatsApp,…
exploit-frameworkspenetration-testingphishing+2
1.6k
owasp/qrljackingSocial engineering attack vector and exploitation framework for hijacking user sessions via QR code login, targeting web applications like WhatsApp,…
owasp/java-html-sanitizerTakes third-party HTML and produces HTML that is safe to embed in your web application. Fast and easy to configure.
owasp/aisvsThe AI Security Verification Standard (AISVS) focuses on providing developers, architects, and security professionals with a structured checklist to…
owasp/pysappysap is an open source Python library that provides modules for crafting and sending packets using SAP's NI, Diag, Enqueue, Router, MS, SNC, IGS,…
owasp/rbacPHP-RBAC is an authorization library for PHP. It provides developers with NIST Level 2 Standard Role Based Access Control and more, in the fastest…
owasp/opencreInteractive platform linking security standards and guidelines for designing, developing, testing, and procuring secure software. Provides a unified…
owasp/json-sanitizerGiven JSON-like content, The JSON Sanitizer converts it to valid JSON.
owasp/user-security-storiesRepo to hold mapping of user-security-stories
owasp/owasp-mcp-governance-and-risk-projectProject focused on governance and risk in application security, providing resources and frameworks for security maturity and risk management.
owasp/owasp-cstgVendor-neutral cloud security testing guide with structured phases for enumeration, privilege escalation, lateral movement, and post-exploitation…
owasp/honeysapHoneySAP: SAP Low-interaction research honeypot
owasp/sedatedSEDATED® Project (Sensitive Enterprise Data Analyzer To Eliminate Disclosure)
owasp/packmanA documentation and tracking project with the goal of making package management systems more secure.
owasp/threat-modeling-playbookStructured playbook for integrating threat modeling into product security, covering stakeholder buy-in, organizational embedding, training, process…
owasp/application-security-curriculumStructured curriculum for learning application security, covering secure coding, threat modeling, and DevSecOps practices. Designed for self-paced…
owasp/mosaicCoordination structure for AI security standards and guidelines, reducing fragmentation and providing clear guidance for securing AI systems across…
