AppSec

Security review, vulnerability scanning, threat modeling, and defensive engineering tools.

12 Repositories Cybersecurity Updated Jul 16

Subcategories

Vulnerability Scanning 23 AppSec 12 Secrets 2 Identity & Access 3 Supply Chain 1 Threat Modeling 7 General Security 45

Topic guide

How to use this AppSec index

AppSec repositories in Skill Atlas are selected from popular GitHub projects and organized to help developers compare tools, patterns, and implementation examples. Use this page as a starting point before opening individual repositories for docs, issues, examples, and license details.

When to use this category

Find established open source projects related to appsec.
Compare repository popularity, language, tags, and practical use cases.
Build a shortlist before deeper technical evaluation.
Discover adjacent categories through related tags and subcategories.

How to choose

Start with repositories that match your language, runtime, and deployment model.
Check recent commits, issue activity, documentation quality, and license before adopting a project.
Use stars as a popularity signal, not as proof of fit or production readiness.
Common languages in this topic include Python, Rust, TypeScript.
Frequent tags include Cybersecurity, hacking, application-security, appsec, security.

AppSec repositories

12 repositories sorted by GitHub stars. Use the interactive explorer for live filters.

Interactive explorer

CheatSheetSeries

AppSec

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

CybersecurityPythonapplication-securityappsecbest-practicescheatsheets

Good for

Explore a popular cybersecurity repository
Study implementation patterns for Python projects
Open GitHub for documentation, examples, and issues

33k stars Python

GitHub

static-analysis

AppSec

⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.

CybersecurityRustanalysisawesome-listcode-qualityhacktoberfest

Good for

Explore a popular cybersecurity repository
Study implementation patterns for Rust projects
Open GitHub for documentation, examples, and issues

15k stars Rust

GitHub

awesome-web-security

AppSec

🐶 A curated list of Web Security materials and resources.

CybersecurityPythonawesomeawesome-listlistpenetration-testing

Good for

Explore a popular cybersecurity repository
Study implementation patterns for Python projects
Open GitHub for documentation, examples, and issues

14k stars Python

GitHub

juice-shop

AppSec

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

CybersecurityTypeScript24pullrequestsapplication-securityappsecctf

Good for

Explore a popular cybersecurity repository
Study implementation patterns for TypeScript projects
Open GitHub for documentation, examples, and issues

14k stars TypeScript

GitHub

DVWA

AppSec

Damn Vulnerable Web Application (DVWA)

CybersecurityPHPdvwahackinginfosecphp

Good for

Explore a popular cybersecurity repository
Study implementation patterns for PHP projects
Open GitHub for documentation, examples, and issues

13k stars PHP

GitHub

mastg

AppSec

The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.

CybersecurityPythonandroidandroid-applicationcompliancy-checklistdynamic-analysis

Good for

Explore a popular cybersecurity repository
Study implementation patterns for Python projects
Open GitHub for documentation, examples, and issues

13k stars Python

GitHub

wstg

AppSec

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

Cybersecurityapplication-securityappsecbest-practicesbugbountyguide

Good for

Explore a popular cybersecurity repository
Study implementation patterns for software projects
Open GitHub for documentation, examples, and issues

9.6k stars

GitHub

DependencyCheck

AppSec

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

CybersecurityJavaant-taskbuild-toolgradle-pluginjenkins-plugin

Good for

Explore a popular cybersecurity repository
Study implementation patterns for Java projects
Open GitHub for documentation, examples, and issues

7.6k stars Java

GitHub

awesome-web-hacking

AppSec

A list of web application security

Cybersecurityappsechackinghacking-toolsmetasploitowasp

Good for

Explore a popular cybersecurity repository
Study implementation patterns for software projects
Open GitHub for documentation, examples, and issues

7.1k stars

GitHub

awesome-appsec

AppSec

A curated list of resources for learning about application security

CybersecurityPHPapplication-securitycuratedowaspreading-list

Good for

Explore a popular cybersecurity repository
Study implementation patterns for PHP projects
Open GitHub for documentation, examples, and issues

7.0k stars PHP

GitHub

ESP32-BlueJammer

AppSec

The ESP32-BlueJammer (Bluetooth jammer, BLE jammer, WiFi jammer, RC jammer) disrupts 2.4GHz communications. Using an ESP32 and nRF24 modules, it generates noise and unnecessary packets, causing interference between the devices communicating, making them unable to work as intended. Ideal for controlled disruption and security testing.

Cybersecuritybluetoothbtcodingcybersecuritydiy

Good for

Explore a popular cybersecurity repository
Study implementation patterns for software projects
Open GitHub for documentation, examples, and issues

6.9k stars

GitHub

Top10

AppSec

Official OWASP Top 10 Document Repository

CybersecurityHTML

Good for

Explore a popular cybersecurity repository
Study implementation patterns for HTML projects
Open GitHub for documentation, examples, and issues

5.9k stars HTML

GitHub