CSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT).

OWASP Zed Attack Proxy project landing page.

Russian translation of OWASP Web Security Testing Guide (WSTG) Project produces the premier cybersecurity testing resource for web application developers and security professionals.

The BOAST Outpost for AppSec Testing: a server designed to receive and report Out-of-Band Application Security Testing (OAST) reactions.

Burp Suite extension designed to help security professionals search for custom sensitive information in HTTP responses

Gitlab CI jobs stdout secrets finder

web security labs

Burp Suite extension designed to help security professionals manage and track web application security findings

A Python package to capture a trimmed screenshot of the SSL Labs report for a given domain.

Tool for attacking MeteorJS applications

Run Cyber Chief API security, web app security & CSPM security tests from your Github Pipeline jobs

Run Cyber Chief API security, web app security & CSPM security tests from Jenkins

A Python script to parse Retire.js HTML scan results and extract vulnerability information from the table for AppSec reports.