SA Skill Atlas GitHub skill index
EN
返回 网络安全

应用安全

安全评审、漏洞扫描、威胁建模和防御工程工具。

12 仓库 网络安全 更新于 7月16日
专题指南

如何使用这个应用安全索引

应用安全页面收录了 GitHub 上较受关注的开源项目,并按标签、语言和实际使用场景组织。它适合作为初筛入口,帮助你在打开具体仓库前先理解方向、比较工具并形成候选清单。

适合什么时候使用

  • 寻找与应用安全相关的成熟开源项目。
  • 比较仓库热度、语言、标签和适用场景。
  • 在深入技术调研前建立候选列表。
  • 通过相关专题发现相邻方向。

如何选择

  • 优先选择与你的语言、运行时和部署方式匹配的项目。
  • 采用前检查近期提交、Issue 活跃度、文档质量和许可证。
  • 星标只能说明流行度,不能直接代表适配度或生产可用性。
  • 这个专题中常见语言包括 Python, Rust, TypeScript。
  • 常见标签包括 Cybersecurity, hacking, application-security, appsec, security。

应用安全 仓库

12 个仓库按 GitHub stars 排序。需要实时筛选时可以打开交互式浏览器。

交互式浏览

CheatSheetSeries

应用安全

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

CybersecurityPythonapplication-securityappsecbest-practicescheatsheets

适合场景

  • Explore a popular cybersecurity repository
  • Study implementation patterns for Python projects
  • Open GitHub for documentation, examples, and issues
33k stars Python
GitHub

static-analysis

应用安全

⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.

CybersecurityRustanalysisawesome-listcode-qualityhacktoberfest

适合场景

  • Explore a popular cybersecurity repository
  • Study implementation patterns for Rust projects
  • Open GitHub for documentation, examples, and issues
15k stars Rust
GitHub

awesome-web-security

应用安全

🐶 A curated list of Web Security materials and resources.

CybersecurityPythonawesomeawesome-listlistpenetration-testing

适合场景

  • Explore a popular cybersecurity repository
  • Study implementation patterns for Python projects
  • Open GitHub for documentation, examples, and issues
14k stars Python
GitHub

juice-shop

应用安全

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

CybersecurityTypeScript24pullrequestsapplication-securityappsecctf

适合场景

  • Explore a popular cybersecurity repository
  • Study implementation patterns for TypeScript projects
  • Open GitHub for documentation, examples, and issues
14k stars TypeScript
GitHub

DVWA

应用安全

Damn Vulnerable Web Application (DVWA)

CybersecurityPHPdvwahackinginfosecphp

适合场景

  • Explore a popular cybersecurity repository
  • Study implementation patterns for PHP projects
  • Open GitHub for documentation, examples, and issues
13k stars PHP
GitHub

mastg

应用安全

The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.

CybersecurityPythonandroidandroid-applicationcompliancy-checklistdynamic-analysis

适合场景

  • Explore a popular cybersecurity repository
  • Study implementation patterns for Python projects
  • Open GitHub for documentation, examples, and issues
13k stars Python
GitHub

wstg

应用安全

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

Cybersecurityapplication-securityappsecbest-practicesbugbountyguide

适合场景

  • Explore a popular cybersecurity repository
  • Study implementation patterns for software projects
  • Open GitHub for documentation, examples, and issues
9.6k stars
GitHub

DependencyCheck

应用安全

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

CybersecurityJavaant-taskbuild-toolgradle-pluginjenkins-plugin

适合场景

  • Explore a popular cybersecurity repository
  • Study implementation patterns for Java projects
  • Open GitHub for documentation, examples, and issues
7.6k stars Java
GitHub

awesome-web-hacking

应用安全

A list of web application security

Cybersecurityappsechackinghacking-toolsmetasploitowasp

适合场景

  • Explore a popular cybersecurity repository
  • Study implementation patterns for software projects
  • Open GitHub for documentation, examples, and issues
7.1k stars
GitHub

awesome-appsec

应用安全

A curated list of resources for learning about application security

CybersecurityPHPapplication-securitycuratedowaspreading-list

适合场景

  • Explore a popular cybersecurity repository
  • Study implementation patterns for PHP projects
  • Open GitHub for documentation, examples, and issues
7.0k stars PHP
GitHub

ESP32-BlueJammer

应用安全

The ESP32-BlueJammer (Bluetooth jammer, BLE jammer, WiFi jammer, RC jammer) disrupts 2.4GHz communications. Using an ESP32 and nRF24 modules, it generates noise and unnecessary packets, causing interference between the devices communicating, making them unable to work as intended. Ideal for controlled disruption and security testing.

Cybersecuritybluetoothbtcodingcybersecuritydiy

适合场景

  • Explore a popular cybersecurity repository
  • Study implementation patterns for software projects
  • Open GitHub for documentation, examples, and issues
6.9k stars
GitHub

Top10

应用安全

Official OWASP Top 10 Document Repository

CybersecurityHTML

适合场景

  • Explore a popular cybersecurity repository
  • Study implementation patterns for HTML projects
  • Open GitHub for documentation, examples, and issues
5.9k stars HTML
GitHub