Temporary GitHub managed Sigstore Policy Controller fork

Personal Access Token (PAT) recon tool for bug bounty hunters, pentesters & red teams

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

WebGoat 8.0

Host and manage multiple Juice Shop instances for security trainings and Capture The Flags

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.

Capture-the-Flag (CTF) environment setup tools for OWASP Juice Shop supporting CTFd, FBCTF and RootTheBox

A vulnerable version of Rails that follows the OWASP Top 10

Fast, multi-platform web server with automatic HTTPS

It's simple!

An example documentation site using the Docsy Hugo theme

Hugo documentation theme as simple as plain book

Presentations, training modules, and other education materials from Duo Security's Application Security team.