The Web Security Testing Guide (WSTG) Project produces the premier cybersecurity testing resource for web application developers and security professionals.
-
Updated
Sep 18, 2026 - HTML
#
wstg
Here are 25 public repositories matching this topic...
Burp Suite extension (BApp Store) that finds backup, old, temporary and unreferenced files leaking sensitive data on web servers. OWASP WSTG-CONF-04.
owasp backup-files penetration-testing application-security pentesting burp burpsuite owasp-top-10 owasp-top-ten burp-extensions sensitive-data-exposure burpsuite-extender data-leakage wstg portswigger appsecurity backupfinder burp-extension
-
Updated
Mar 27, 2024 - Java
OWASP ASVS Security Evaluation Templates with Nuclei
-
Updated
Dec 2, 2025 - Python
A lab-driven course on breaking web applications and explaining how to fix them — 491 notes, 36 reproducible labs, mapped to OWASP WSTG and the PortSwigger Top 10 Web Hacking Techniques.
oauth jwt xss owasp penetration-testing sql-injection csrf application-security web-security knowledge-base obsidian study-notes offensive-security ethical-hacking ssrf owasp-top-10 request-smuggling burp-suite wstg bscp
-
Updated
Aug 30, 2026
OWASP Web Security Testing Guide (fa-IR)
security guide best-practices owasp penetration-testing application-security web-security pentesting persian bugbounty farsi hacktoberfest websecurity wstg mh11
-
Updated
Jun 18, 2023
Unified NIST + OWASP security framework MCP server — 36 tools, 3439+ records, live NVD/KEV, PDF reading, STRIDE threat modeling, compliance mapping
security nist mcp csf owasp cybersecurity compliance threat-modeling nvd cwe asvs top10 wstg nist-800-53 mcp-server
-
Updated
Apr 26, 2026 - Python
Community-maintained Spanish translation of the OWASP Web Security Testing Guide (WSTG). https://github.com/OWASP/wstg#translations.
-
Updated
Jul 22, 2026
Actionable, multi-language OWASP Web Security Testing Guide (WSTG) checklists.
-
Updated
Jun 11, 2026
Intentionally Vulnerable Pages for OWASP ASVS Security Evaluation Templates with Nuclei Project. https://snbig.github.io/Vulnerable-Pages/
-
Updated
Jan 22, 2025 - Python
WSTG tells you what to cover. This tells you what the tests inside each line actually are: the procedure, the oracle that separates a real result from the thing that imitates it, and where a success can lead. One offline, self-contained HTML file — no server, no install, no network.
owasp penetration-testing bug-bounty infosec application-security web-security pentesting appsec offensive-security cwe web-application-security security-testing asvs attack-graph wstg attack-graphs owasp-wstg attack-chain security-testing-methodology
-
Updated
Sep 14, 2026 - Python
Comprehensive OWASP Web Application Security Testing Checklist aligned with the latest OWASP WSTG. Includes guidance for web, API, and client-side testing.
checklist owasp cybersecurity penetration-testing infosec web-security security-testing api-security webapp-security wstg
-
Updated
Nov 16, 2025
Generate shareable security evidence reports from GitHub Actions.
-
Updated
Jun 8, 2026
Client-side password breach checker using k-anonymity (HIBP Pwned Passwords API). No backend, no full password or hash ever leaves the browser. WSTG-ATHN-07.
-
Updated
Sep 13, 2026 - JavaScript
AI penetration testing platform with autonomous security agents
owasp cybersecurity pentesting vulnerability-assessment ethical-hacking red-team autonomous-agents security-testing wstg ai-agent
-
Updated
Mar 23, 2026 - TypeScript
PUBLIC | Faculdade de Ciências e Tecnologia da Universidade de Coimbra (FCTUC) - Mestrado em Engenharia Informática (MEI) - Percurso: Engenharia de Software - 2022/2023 | Segurança em Tecnologias da Informação (STI) - Exercícios: OWASP ZAP; GnuPG; OpenVPN; Apache; X.509 certificates; IPTables/Netfilter; Snort; WSTG; ModSecurity; WAF.
linux openvpn centos gnupg apache iptables waf software-engineering modsecurity netfilter owasp-zap snort x509certificates computer-science-and-engineering wstg fctuc
-
Updated
Jul 16, 2023
OWASP WSTG checklist, passive candidate discovery, evidence verification, and reporting for Caido
-
Updated
Sep 2, 2026 - TypeScript
Burp Suite extension that automates SQL injection detection (error/boolean/time-based, confidence-scored), WSTG-INPVAL-05. Detection only; exploitation stays manual.
-
Updated
Sep 13, 2026 - Java
CLI focused web app security scanner aligned with the OWASP Top 10 & WSTG. Safe-by-default, extensible, built in public.
python cli security owasp infosec web-security pentesting appsec security-scanner security-tools owasp-top-10 devsecops vulnerability-scanner wstg
-
Updated
Jul 2, 2026 - Python
Add this topic to your repo
To associate your repository with the wstg topic, visit your repo's landing page and select "manage topics."