Simon Bennetts

open-source-web-scanners. A list of open source web security scanners

bodgeit. The BodgeIt Store is a vulnerable web application which is currently aimed at people who are new to pen testing.

open-source-llm-scanners.

owasp-top-10-top-10s.

owasp-projects.

zaproxy. The OWASP ZAP core project

pwning-juice-shop. GitBook markdown content for the eBook "Pwning OWASP Juice Shop"

zap-hud. The OWASP ZAP Heads Up Display (HUD)

zaproxy-release. Test mirroe

minion-garmr. plugin service, plugin spec, and garmr plugin for minion

DevSecOpsGuideline. The OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.

skf-www. Public Website of SKF

Benchmark. The OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. As it is written in Java, it supports Java Static Analysis Security Testing Tools (SAST). It’s also a fully runnable web application, so it supports Dynamic Analysis Security Testing Tools (DAST), like OWASP ZAP, and Interactive Analysis Security Testing Tools (IAST) that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually exploitable, it’s a fair test for any kind of vulnerability detection tool. For more details on this project, please see the OWASP Benchmark Project home page.

security-crawl-maze. Security Crawl Maze is a comprehensive testbed for web security crawlers. It contains pages representing many ways in which one can link resources from a valid HTML document.

blurts-server. Prototyping for upcoming Breach Alerts feature in Firefox

addons-server. 🕶 addons.mozilla.org Django app and API 🎉

puppet. Server automation framework and application

websec-check. repo and tooling for https://wiki.mozilla.org/Security/FirefoxOperations#Security_Checklist

contributor_covenant. Pledge your respect and appreciation for contributors of all kinds to your open source project.

Hacking-Tools-Repository. A list of security/hacking tools that have been collected from the internet. Suggestions are welcomed.

browser-extension-1. A Out of the Box 🎁 Browser Extension Template with support for React, Typescript, Preact

zap-plugin. The OWASP ZAP Jenkins Plugin extends the functionality of the ZAP security tool into a CI Environment.

foxsec-tools. Tooling to support common tasks, particularly for working with metrics

cii-best-practices-badge. Core Infrastructure Initiative Best Practices Badge

find-package-rugaru. Tools for finding suspicious werewolf / rugaru / rougarou-like packages

packman. A documentation and tracking project with the goal of making package management systems more secure.

jnats. A Java client for NATS

iprepd. Centralized IP reputation daemon

dependency-observatory. Mozilla's Dependency Observatory

oss2019. Open Security Summit 2019

owasp-swag. Swag for the OWASP projects and chapters

bedrock. Making mozilla.org awesome, one pebble at a time

zap-auth-dt. ZAP Auth Decision Tree - temp test repo

owasp-summit-2017. Content for OWASP Summit 2017 site

zap-media-resources.

zap-extensions. OWASP ZAP Add-ons

Plug-n-Hack. Stuff relating to Plug-n-Hack; documents, browser independent scripts, tests, etc.

homebrew-cask. A CLI workflow for the administration of Mac applications distributed as binaries