Highlighted
Open highlighted repo slot
Put your repository first
Promote a GitHub repo at the top of Awesome repository list views for 7 days.
Awesome List
Awesome Web Security
🐶 A curated list of Web Security materials and resources.
qazbnm456/awesome-web-security
#awesome
#awesome-list
#list
#penetration-testing
#security
#web
#websecurity
- List stars
- 13,913
- README repos
- 129
- Indexed repos
- 122
- List commits
- 584
- Forks
- 1,884
- Open issues
- 20
Tracked list growth
GitHub stars and default-branch commits for qazbnm456/awesome-web-security.
Latest scan 2026-10-18 10:50
Likes history
GitHub starsCommits history
Default branch commits
Latest repo push 2026-10-18
openai/codex
Lightweight coding agent that runs in your terminal
AI dev
- Updated
- 2026-10-18
- Lists
- 11 list mentions
- First commit
- 2025-04-16
- License
- Apache-2.0
- Issues
- 23,276 open
129,694
stars
- Forks
- 20,417
- Commits
- 12,331 commits
- Star growth, last 7 days
- 0 0.0%
- Commit velocity, last 7 days
- 0 0.0%
juice-shop/juice-shop
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
AI dev
Stack
GitHub topics
- Updated
- 2026-10-17
- Lists
- 3 list mentions
- First commit
- 2014-09-19
- License
- MIT
- Issues
- 7 open
14,123
stars
- Forks
- 20,104
- Commits
- 23,577 commits
- Star growth, last 7 days
- 0 0.0%
- Commit velocity, last 7 days
- 0 0.0%
RhinoSecurityLabs/cloudgoat
CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
- Updated
- 2026-10-14
- Lists
- 1 list mention
- First commit
- 2018-07-17
- License
- BSD-3-Clause
- Issues
- 19 open
3,760
stars
- Forks
- 774
- Commits
- 705 commits
- Star growth, last 7 days
- 0 0.0%
- Commit velocity, last 7 days
- 0 0.0%
maxchehab/CSS-Keylogging
Chrome extension and Express server that exploits keylogging abilities of CSS.
- Updated
- 2018-02-20
- Lists
- 1 list mention
- First commit
- 2018-02-20
- License
- Unknown
- Issues
- 0 open
3,237
stars
- Forks
- 420
- Commits
- 4 commits
- Star growth, last 7 days
- 0 0.0%
- Commit velocity, last 7 days
- 0 0.0%
vigolium/vigolium
Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision
AI dev
GitHub topics
- Updated
- 2026-10-18
- Lists
- 1 list mention
- First commit
- 2026-05-23
- License
- NOASSERTION
- Issues
- 4 open
1,120
stars
- Forks
- 163
- Commits
- 295 commits
- Star growth, last 7 days
- 0 0.0%
- Commit velocity, last 7 days
- 0 0.0%
LewisArdern/bXSS
bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
Stack
GitHub topics
- Updated
- 2023-03-04
- Lists
- 1 list mention
- First commit
- 2017-12-13
- License
- MIT
- Issues
- 20 open
580
stars
- Forks
- 63
- Commits
- 147 commits
- Star growth, last 7 days
- 0 0.0%
- Commit velocity, last 7 days
- 0 0.0%
HoLyVieR/prototype-pollution-nsec18
Content released at NorthSec 2018 for my talk on prototype pollution
Stack
- Updated
- 2024-05-25
- Lists
- 1 list mention
- First commit
- 2018-05-16
- License
- Unknown
- Issues
- 1 open
- Forks
- 88
- Commits
- 5 commits
- Star growth, last 7 days
- 0 0.0%
- Commit velocity, last 7 days
- 0 0.0%
brannondorsey/dns-rebind-toolkit
A front-end JavaScript toolkit for creating DNS rebinding attacks.
Stack
GitHub topics
- Updated
- 2021-10-02
- Lists
- 1 list mention
- First commit
- 2018-05-19
- License
- MIT
- Issues
- 3 open
- Forks
- 84
- Commits
- 18 commits
- Star growth, last 7 days
- 0 0.0%
- Commit velocity, last 7 days
- 0 0.0%
ReversecLabs/dref
DNS Rebinding Exploitation Framework
Stack
GitHub topics
- Updated
- 2021-04-27
- Lists
- 1 list mention
- First commit
- 2018-06-23
- License
- Unknown
- Issues
- 2 open
494
stars
- Forks
- 70
- Commits
- 108 commits
- Star growth, last 7 days
- 0 0.0%
- Commit velocity, last 7 days
- 0 0.0%
WebDecoy/FCaptcha
Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.
- Updated
- 2026-10-16
- Lists
- 3 list mentions
- First commit
- 2025-12-29
- License
- MIT
- Issues
- 10 open
221
stars
- Forks
- 24
- Commits
- 207 commits
- Star growth, last 7 days
- 0 0.0%
- Commit velocity, last 7 days
- 0 0.0%