appsec topic

Oversecured Vulnerable iOS App

oversecured

A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.

hysnsec

This project is about creating and publishing threat model examples.

OWASP

Jenkins plugin for OWASP Dependency-Check. Inspects project components for known vulnerabilities (e.g. CVEs).

jenkinsci

httpvoid

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

Checkmarx

Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependencies. CI and Git friendly.

ShiftLeftSecurity

ZAP Add-ons

zaproxy

The ZAP Heads Up Display (HUD)

zaproxy

Workshop on Template Injection (6 exercises) covering Twig, Jinja2, Tornado, Velocity and Freemaker engines.

GoSecure