The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.

secureCodeBox (SCB) - continuous secure delivery out of the box

The repository for my Home Assistant Supervisor Add-ons.

Bugbounty scope tool

OWASP VulnerableApp Project: For Security Enthusiasts by Security Enthusiasts.

Zed Attack Proxy Scripts for finding CVEs and Secrets.

Integrates OWASP Zed Attack Proxy reports into SonarQube

Demo - how to easily build security testing for Web App, using Zap and Glue

VulnerableApp-facade is probably most modern lightweight distributed farm of Vulnerable Applications built for handling wide range of vulnerabilities across tech stacks.

A security tool designed to perform thorough scans on a target using OpenVAS, Zap, and Nexpose. It seamlessly consolidates and integrates the scan results, providing a comprehensive overview of the security vulnerabilities identified.

Interactive IPython Notebook to demonstrate OWASP ZAP's API and Scripting Functions - OWASP ZAP 2.8.0

QuickStart template targeted for OpenShift.

This is a collection of ZAProxy Automation Tools and scripts to automate security tests of WEB Applications and WEB Sites

La intención de la workshop es mostrar y orientar a los equipos de desarrollo, seguridad y devops (entre otros) que quieran comenzar en DevSecOps, a segurar sus aplicaciones o bien a conocer un poco más acerca del desarrollo seguro, para esto, estaremos otorgando algunos tips e información que fuimos aprendiendo para armar un Pipeline DevSecOps …

Ansible module for OWASP ZAP using Python API to scan web targets for security issues

JAVA Clean template clean architecture, feature toggles and test pyramid

OWASP ZAP add-on to detect reflected parameter vulnerabilities efficiently

Store ZAP reports historically and compare current ZAP results against the most recent for changes in alerts.

Advanced use of WPScan (WordPress Security Scanner) with other tools like nmap, nikto, owasp-zap, ids for ethnical Hackers