applicationsecurity

AspGoat is an intentionally vulnerable ASP.NET Core application for learning and practicing web application security.

AI-powered security code analysis and vulnerability scanner built with modern AI models and OWASP best practices.

🔒 Intentionally vulnerable ASP.NET Core app for hands-on web security & penetration testing practice

urlyzer is a URL parsing analysis tool.

free website fivem server + Whitelist applications

PathFinder is a tool designed to visualize call graphs of source code.

🏴‍☠️ BST is an ever-evolving collection of 🛠 tools to help in security and administration tasks 😉

Automated Security testing using ZAP Python API. This can be used with any functional UI automation tool.

AiShields is an open-source Artificial Intelligence Data Input and Output Sanitizer

A collection of AppSec case studies on business logic flaws and insecure design scenarios.

A REST API and optional browser UI for exploring package dependencies.

Cross-platform Python scanner for indicators of compromise from the axios npm supply chain attack (2026-03-31), attributed to DPRK-linked threat actor UNC1069.

Custom PortSwigger Burp Suite extensions

Maven Repo Used for Extending Faction.

This Application Security and DevSecOps wiki is made to keep all resources, links, articles, researches in one place.

A Cybersecurity Book Collection for domains: Network Security, Application Security, Cloud Security, Penetration Testing, Digital Forensics, Cryptography & more.

A (purpousely) vulnerable, social-media-like, django web application

Secure File Reader is a Python-based tool that defends against directory traversal attacks by restricting file access strictly to a designated safe directory. It ensures robust verification of requested file paths, preventing unauthorized access to sensitive system files and enhancing application security.

By injecting a malicious XML document containing an external entity, I was able to force the server to process a local file reference. The application returned the contents of the requested system file in the HTTP response, confirming **Arbitrary Local File Disclosure**.