リポジトリ

OWASP のリポジトリ

37 件の対応リポジトリ

最終コミット 2020/01/22

 (4 stars) (2 forks) (0 件の索引済み issue) (0 件のオープンな good first issue)

Application Security Verification Standard

最終コミット 2023/10/17

 (2,324 stars) (586 forks) (0 件の索引済み issue) (0 件のオープンな good first issue)

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

最終コミット 2024/04/06

 (26,342 stars) (3,703 forks) (0 件の索引済み issue) (0 件のオープンな good first issue)

A Common Weakness Enumeration (CWE) Node.js SDK compliant with MITRE / CAPEC

最終コミット 2026/04/30

 (32 stars) (11 forks) (0 件の索引済み issue) (0 件のオープンな good first issue)
OWASP/cwe-toolJavaScript

A command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration.

最終コミット 2026/04/30

 (64 stars) (22 forks) (0 件の索引済み issue) (0 件のオープンな good first issue)

Kubernetes Security Testing Guide

最終コミット 2020/06/24

 (27 stars) (5 forks) (0 件の索引済み issue) (0 件のオープンな good first issue)

The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.

最終コミット 2025/12/18

 (12,605 stars) (2,597 forks) (0 件の索引済み issue) (0 件のオープンな good first issue)

Your gateway to OWASP. Discover, engage, and help shape the future!

最終コミット 2026/07/11

 (412 stars) (651 forks) (8 件の索引済み issue) (8 件のオープンな good first issue)

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

最終コミット 2023/05/08

 (2,338 stars) (630 forks) (1 件の索引済み issue) (1 件のオープンな good first issue)

The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.

最終コミット 2023/06/21

 (2,060 stars) (2,792 forks) (3 件の索引済み issue) (3 件のオープンな good first issue)

最終コミット 2026/07/30

 (167 stars) (116 forks) (5 件の索引済み issue) (3 件のオープンな good first issue)

最終コミット 2020/06/30

 (35 stars) (20 forks) (0 件の索引済み issue) (0 件のオープンな good first issue)

The OWASP Java Encoder is a Java 1.5+ simple-to-use drop-in high-performance encoder class with no dependencies and little baggage. This project will help Java web developers defend against Cross Site Scripting!

最終コミット 2025/11/17

 (541 stars) (122 forks) (0 件の索引済み issue) (0 件のオープンな good first issue)

A documentation and tracking project with the goal of making package management systems more secure.

最終コミット 2021/03/05

 (52 stars) (12 forks) (0 件の索引済み issue) (0 件のオープンな good first issue)

QRLJacking or Quick Response Code Login Jacking is a simple-but-nasty attack vector affecting all the applications that relays on “Login with QR code” feature as a secure way to login into accounts which aims for hijacking users session by attackers.

最終コミット 2025/08/07

 (1,559 stars) (654 forks) (1 件の索引済み issue) (1 件のオープンな good first issue)

A vulnerable version of Rails that follows the OWASP Top 10

最終コミット 2023/08/19

 (836 stars) (584 forks) (1 件の索引済み issue) (1 件のオープンな good first issue)

最終コミット 2018/11/28

 (0 stars) (0 forks) (0 件の索引済み issue) (0 件のオープンな good first issue)

最終コミット 2022/09/12

 (6 stars) (6 forks) (0 件の索引済み issue) (0 件のオープンな good first issue)

最終コミット 2022/07/30

 (6 stars) (5 forks) (0 件の索引済み issue) (0 件のオープンな good first issue)

Official OWASP Top 10 Document Repository

最終コミット 2023/11/10

 (3,906 stars) (800 forks) (0 件の索引済み issue) (0 件のオープンな good first issue)