StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.

Most advanced XSS scanner.

The OWASP AppSec Browser Bundle is an open source Linux based penetration testing browser bundle built over Mozilla Firefox. It comes pre-configured with security tools for spidering, advanced web …

Official OWASP Top 10 Document Repository

Application Security Automation

Simple HS256, HS384 & HS512 JWT token brute force cracker.

A jailbreak detection library for iOS

nodejsscan is a static security code scanner for Node.js applications.

A vulnerable version of Rails that follows the OWASP Top 10

Damn Vulnerable Web Application (DVWA)

The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWA…

The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.

Android OBD-II Reader application that uses pure OBD-II PID's Java API.