Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

security security-audit owasp ci-cd cybersecurity penetration-testing pentesting appsec offensive-security ethical-hacking security-automation sarif security-tools devsecops security-testing api-security red-teaming ai-security pentesting-tools ai-penetration-testing

• Updated Nov 11, 2026
• TypeScript

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

security code best-practices owasp application-security appsec cheatsheets

• Updated Nov 12, 2026
• JavaScript

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

rest static-analysis apk owasp dynamic-analysis web-security malware-analysis mobsf android-security mobile-security windows-mobile-security ios-security api-testing cwe devsecops runtime-security mstg masvs mastg

• Updated Nov 11, 2026
• Python

A collection of hacking / penetration testing resources to make you better!

exploit reverse-engineering malware mitm hacking owasp penetration-testing ctf privilege-escalation buffer-overflow windows-privilege-escalation privilege-escalation-linux

• Updated May 21, 2026

In-depth attack surface mapping and asset discovery

go dns golang osint owasp subdomain enumeration recon maltego network-security information-gathering osint-reconnaissance attack-surfaces

• Updated Nov 12, 2026
• Go

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

javascript security hacking owasp application-security pentesting ctf vulnerable appsec hacktoberfest owasp-top-10 owasp-top-ten 24pullrequests vulnapp

• Updated Nov 11, 2026
• TypeScript

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

security guide best-practices hacking owasp penetration-testing application-security pentesting bugbounty appsec hacktoberfest

• Updated Nov 11, 2026
• CSS

A list of web application security

security scanner hacking owasp penetration-testing vulnerability web-security pentesting vulnerabilities appsec metasploit web-hacking hacking-tools

• Updated Oct 29, 2026

A curated list of resources for learning about application security

security curated owasp application-security security-experts reading-list

• Updated Feb 22, 2025
• PHP

Next generation web scanner

ruby security web scanner hacking owasp penetration-testing application-security pentesting recon pentest kali-linux appsec network-security web-hacking security-tools penetration-test hacking-tools pentesting-tools penetration-testing-tools

• Updated Apr 2, 2026
• Ruby

AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.

microsoft python security owasp trust compliance governance ai-safety policy-engine ai-agents zero-trust agent-framework

• Updated Nov 11, 2026
• Python

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

docker kubernetes infrastructure security container hacking owasp k8s cloud-native pentesting blueteam cloudsecurity devsecops cloud-security redteam container-security vulnerable-app kubernetes-security kubernetes-goat

• Updated Apr 16, 2026
• HTML

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

python security automation scanner bruteforce owasp penetration-testing pentesting recon cve vulnerability-management vulnerability-scanners network-security information-gathering portscanner security-tools vulnerability-scanner penetration-testing-framework hacking-tools pentesting-tools

• Updated Nov 12, 2026
• Python

Open-Source Unified Vulnerability Management, DevSecOps & ASPM

python kubernetes security automation django analytics owasp vulnerability-databases appsec vulnerability-management hacktoberfest security-orchestration security-automation devsecops vulnerability-correlation

• Updated Nov 12, 2026
• Python

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

security owasp bom vulnerabilities appsec component-analysis nvd vulnerability-detection hacktoberfest sca software-security security-automation devsecops software-composition-analysis bill-of-materials ossindex purl package-url sbom cyclonedx

• Updated Nov 12, 2026
• Java

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library

go golang http waf owasp modsecurity hacktoberfest web-application-firewall coraza coraza-waf owasp-crs coreruleset

• Updated Nov 12, 2026
• Go

😎 🔗 Awesome list about all kinds of resources for learning Ethical Hacking and Penetration Testing.

awesome hacking resources owasp penetration-testing awesome-list ctf hacktoberfest ethical-hacking web-hacking vulnerable-applications learning-hacking hacking-resources

• Updated Apr 18, 2026

bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS

go html golang sanitization security xss owasp allowlist

• Updated Apr 4, 2025
• Go

OWASP CRS (Official Repository)

security waf owasp ruleset crs

• Updated Nov 12, 2026
• Python

Awesome Node.js Security resources

nodejs security awesome owasp cybersecurity infosec awesome-list web-security vulnerabilities pentest hacktoberfest

• Updated Oct 18, 2026