Current GitHub adoption and maintenance signals.
Home of the developement for OWASP WTE - the Web Testing Environment, a collection of pre-packaged Linux AppSec tools, apps and documentation used to create pre-configured VMs or installed ala carte in the Linux of your choice..
Wrapper for curl allowing easy inclusion of command line options from a configuration file so your curl commands can go on a serious diet
Repo to hold the markdown-ified metadata on AppSec tools that are automation-friendly
Course material for University of Texas, Computer Science Department course CS 361 - Introduction to Computer Security
A place where I keep hany info on installing/configuring stuff and other useful information.
A program to upload Checkmarx static analysis results (xml) files to ThreadFix. TFCheckmarxUpload is used to automate submission of Checkmarx results to ThreadfFix.
An example of using tfclient to gather metrics from ThreadFix's REST API
Go library to work with the ThreadFix REST API. ThreadFix can be found at https://github.com/denimgroup/threadfix
Direct import of the legacy source of OWASP WTE from Google Code for reference purposes only.
A repo to hold the mildly modified Gruyere source code used for the mtesauro/gruyere docker image.
The markup, code and templates that make up the AppSec Toolbox site
Go module to make running command more endearing
Tools for doing things with gh orgs
Container to run a local test environment when making PRs or edits to the new OWASP website driven by Github pages / Jekyll
Repo where I keep the packages I just like to create for myself and anyone else's enjoyment.
A command-line tool to generate a draft AppSec status report based on data pulled from ThreadFix's REST API.
Docker files used for example containers
No repository description provided.
Github wehooks and such
No repository description provided.
OWASP Foundation main site repository
Testing out some testing of testing the UI
Web app to provide access to taskwarrior tasks
Poc using hex arch
OWASP Community Pages are a place where OWASP can accept community contributions for security-related content.
No repository description provided.
Example of using the commandeer library
OWASP Foundation Web Respository
No repository description provided.
Mobile Dot files
A collection of the presentations from AllDayDevOps 2019
Convert FoD csv to a Dojo-friendly csv
A highly extensible Git implementation in pure Go.
Home for the draft documents for the revitalization of OWASP Projects. Written in markdown for later conversion to MediaWiki markup via Pandoc
Proof of concept postern agent
An agent allowing secure access to encryption materials from the Barbican key management API.
this is a demo set of attacks that can be used to get started with gauntlt
Various utilities to parse security scanner results/exports into ofhter, more consumable formats.
Open-Source Unified Vulnerability Management, DevSecOps & ASPM
Used for an initial test of Caddy's Github integration
Data from OWASP's Wiki, mailman, etc...
An application security utility to assist in the organization and prioritization of software security activities.