OWASP ASVS Security Evaluation Templates with Nuclei
-
Updated
Dec 2, 2025 - Python
OWASP ASVS Security Evaluation Templates with Nuclei
Unified NIST + OWASP security framework MCP server — 36 tools, 3439+ records, live NVD/KEV, PDF reading, STRIDE threat modeling, compliance mapping
WSTG tells you what to cover. This tells you what the tests inside each line actually are: the procedure, the oracle that separates a real result from the thing that imitates it, and where a success can lead. One offline, self-contained HTML file — no server, no install, no network.
Intentionally Vulnerable Pages for OWASP ASVS Security Evaluation Templates with Nuclei Project. https://snbig.github.io/Vulnerable-Pages/
WSTG-based web vulnerability scanner with GUI: intercepting proxy, async mutation scan engine, 38 OWASP WSTG checks, evidence & reports
Local-first AI security & pentesting platform via MCP — Rust static scanner + Python MCP server with WSTG playbooks, RBAC/IDOR matrix & SARIF export.
AI security knowledge base: 2,057 OWASP-derived security check cards for AI coding agents (Claude, Cursor, MCP). Detect your stack, get the exact security checks to verify — ASVS, WSTG, MASTG, Top 10, cheat sheets. Provenance to file+commit.
CLI recon automation for authorized pentest engagements: passive subdomain enum, service fingerprinting, OSINT dorking. Findings mapped to OWASP WSTG-INFO.
Autonomous Web Application & API Penetration Testing plugin for Claude Code — OWASP WSTG + OWASP-LLM driven, Burp-MCP integrated, true-positive-only reporting.
OWASP WSTG-aligned session testing helpers (educational, Python-based).
To associate your repository with the wstg topic, visit your repo's landing page and select "manage topics."