Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...

vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios through Exercises.

Java Agent is a Java application probe of DongTai IAST, which collects method invocation data during runtime of Java application by dynamic hooks.

Vulnerable code snippets with fixes for Web2, Web3, API, iOS, Android and Infrastructure-as-Code (IaC)

Some good resources for getting started with application security

Application with SQL Injection vulnerability and possible privilege escalation. Free vulnerable app for ethical hacking / penetration testing training.

Interactive IPython Notebook to demonstrate OWASP ZAP's API and Scripting Functions - OWASP ZAP 2.8.0

Additional Resources For Securing The Stack Tutorials

Dongtai-plugin-idea is an IDEA plug-in developed by DongTai team for Java Web application developers. This plug-in provides functions such as vulnerability detection and code audit during application development, enabling developers to find application vulnerabilities more intuitively, quickly and in real time during application development.

Contrast Security Instrumentation for Dockerized Webgoat, with lab instructions.

This repository has been merged into https://github.com/HXSecurity/DongTai. DongTai-engine used to analyze the method data collected by the probe, analyze whether there are vulnerabilities in API requests through the algorithm of taint tracking, and is also responsible for timing tasks, including: expired log cleaning, probe state maintenance, …

Лабораторные работы по курсам для AppSec, Risk Analysis, Securty Champion: Toolchain, Orchestration, CI/CD, UML, etc.

AppsecStudy - open-source elearning management system for information security

React Native AppSec Sample

Карта инструментов AppSec, которая дает возможность выбрать выгодные для себя решения под все необходимые ситуации: когда нет денег, когда не можем интегрировать большой инструмент, когда никого нет и приходится делать все одному и тд.

A playful introduction to web application vulnerabilities in the OWASP Top 10 while relying only on developer tools offered by modern web browsers.

The Good Parts of Application Security: learn how to build and test secure webapps

Collaborate effectively with the Study Planner app. Organize study groups, track tasks, and chat in real-time. 🌟📅 Join us on GitHub!

📘 Organize your study schedule with Study Planner, a simple web app that helps students manage their time and subjects effectively.

This repository provides practical examples for developers and security professionals seeking to implement secure coding practices in their applications and operational workflows. It covers common security vulnerabilities such as path manipulation, file upload flaws, and input validation issues, offering robust solutions to mitigate these risks.