The Web Security Testing Guide (WSTG) Project produces the premier cybersecurity testing resource for web application developers and security professionals.
-
Updated
Nov 12, 2026 - HTML
#
wstg
Here are 30 public repositories matching this topic...
Burp Suite extension (BApp Store) that finds backup, old, temporary and unreferenced files leaking sensitive data on web servers. OWASP WSTG-CONF-04.
owasp backup-files penetration-testing application-security pentesting burp burpsuite owasp-top-10 owasp-top-ten burp-extensions sensitive-data-exposure burpsuite-extender data-leakage wstg portswigger appsecurity backupfinder burp-extension
-
Updated
Mar 27, 2024 - Java
OWASP ASVS Security Evaluation Templates with Nuclei
-
Updated
Dec 2, 2025 - Python
A lab-driven course on breaking web applications and explaining how to fix them — 491 notes, 36 reproducible labs, mapped to OWASP WSTG and the PortSwigger Top 10 Web Hacking Techniques.
oauth jwt xss owasp penetration-testing sql-injection csrf application-security web-security knowledge-base obsidian study-notes offensive-security ethical-hacking ssrf owasp-top-10 request-smuggling burp-suite wstg bscp
-
Updated
Aug 30, 2026
OWASP Web Security Testing Guide (fa-IR)
security guide best-practices owasp penetration-testing application-security web-security pentesting persian bugbounty farsi hacktoberfest websecurity wstg mh11
-
Updated
Jun 18, 2023
Unified NIST + OWASP security framework MCP server — 36 tools, 3439+ records, live NVD/KEV, PDF reading, STRIDE threat modeling, compliance mapping
security nist mcp csf owasp cybersecurity compliance threat-modeling nvd cwe asvs top10 wstg nist-800-53 mcp-server
-
Updated
Apr 26, 2026 - Python
Community-maintained Spanish translation of the OWASP Web Security Testing Guide (WSTG). https://github.com/OWASP/wstg#translations.
-
Updated
Oct 21, 2026
Independent pentest workspace based on the OWASP WSTG: checklist, CVSS-scored findings, evidence and DOCX/HTML/PDF reports. Optional AI (bring your own key). Runs locally.
checklist owasp penetration-testing bug-bounty pentest appsec cvss security-testing pentest-report wstg
-
Updated
Nov 11, 2026 - JavaScript
Actionable, multi-language OWASP Web Security Testing Guide (WSTG) checklists.
-
Updated
Jun 11, 2026
WSTG tells you what to cover. This tells you what the tests inside each line actually are: the procedure, the oracle that separates a real result from the thing that imitates it, and where a success can lead. One offline, self-contained HTML file — no server, no install, no network.
owasp penetration-testing bug-bounty infosec application-security web-security pentesting appsec offensive-security cwe web-application-security security-testing asvs attack-graph wstg attack-graphs owasp-wstg attack-chain security-testing-methodology
-
Updated
Sep 14, 2026 - Python
Intentionally Vulnerable Pages for OWASP ASVS Security Evaluation Templates with Nuclei Project. https://snbig.github.io/Vulnerable-Pages/
-
Updated
Jan 22, 2025 - Python
Comprehensive OWASP Web Application Security Testing Checklist aligned with the latest OWASP WSTG. Includes guidance for web, API, and client-side testing.
checklist owasp cybersecurity penetration-testing infosec web-security security-testing api-security webapp-security wstg
-
Updated
Nov 2, 2026
WSTG-based web vulnerability scanner with GUI: intercepting proxy, async mutation scan engine, 38 OWASP WSTG checks, evidence & reports
python security owasp tkinter web-security pentest mitmproxy security-tools vulnerability-scanner wstg
-
Updated
Nov 2, 2026 - Python
Client-side password breach checker using k-anonymity (HIBP Pwned Passwords API). No backend, no full password or hash ever leaves the browser. WSTG-ATHN-07.
-
Updated
Sep 13, 2026 - JavaScript
Generate shareable security evidence reports from GitHub Actions.
-
Updated
Jun 8, 2026
Local-first AI security & pentesting platform via MCP — Rust static scanner + Python MCP server with WSTG playbooks, RBAC/IDOR matrix & SARIF export.
python rust security mcp static-analysis cybersecurity penetration-testing rbac pentesting pentest ai-security idor wstg model-context-protocol
-
Updated
Sep 11, 2026 - Python
PUBLIC | Faculdade de Ciências e Tecnologia da Universidade de Coimbra (FCTUC) - Mestrado em Engenharia Informática (MEI) - Percurso: Engenharia de Software - 2022/2023 | Segurança em Tecnologias da Informação (STI) - Exercícios: OWASP ZAP; GnuPG; OpenVPN; Apache; X.509 certificates; IPTables/Netfilter; Snort; WSTG; ModSecurity; WAF.
linux openvpn centos gnupg apache iptables waf software-engineering modsecurity netfilter owasp-zap snort x509certificates computer-science-and-engineering wstg fctuc
-
Updated
Jul 16, 2023
OWASP WSTG checklist, passive candidate discovery, evidence verification, and reporting for Caido
-
Updated
Sep 30, 2026 - TypeScript
Add this topic to your repo
To associate your repository with the wstg topic, visit your repo's landing page and select "manage topics."