Search Results for "web security lab"
Sort By:
242 projects for "web security lab" with 2 filters applied:
-
$300 Free Credits to Build on Google CloudPut your $300 in credit toward real workloads, then keep building with free monthly usage for 20+ products. No commitment and no charge until you upgrade.
-
MongoDB Atlas runs apps anywhereMongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.
-
1
OWASP Find Security Bugs
The SpotBugs plugin for security audits of Java web applications
The SpotBugs plugin for security audits of Java web applications. Find Security Bugs is the SpotBugs plugin for security audits of Java web applications. It can detect 141 different vulnerability types with over 823 unique API signatures. Cover popular frameworks including Spring-MVC, Struts, Tapestry and many more. Plugins are available for Eclipse, IntelliJ / Android Studio and NetBeans. -
2
Privilege-Escalation
This cheasheet is aimed at the CTF Players and Beginners
...Topics include sudo permissions, SUID binaries, kernel weaknesses, scheduled jobs, Linux capabilities, writable files, containers, databases, and network services. Individual guides connect these concepts to vulnerable lab machines and CTF examples. This structure helps learners recognize recurring misconfigurations and understand why they create security risk. The collection is primarily focused on Linux-oriented privilege escalation and educational security practice. -
3
HestiaCP
Hestia Control Panel | A lightweight and powerful control panel
HestiaCP is an open-source web hosting control panel designed to manage web servers efficiently. It provides a simple and intuitive graphical interface to manage domains, web hosting, databases, email accounts, and other server-related tasks. HestiaCP is lightweight and based on the Vesta Control Panel but offers more modern features and improved security. It supports popular web servers like Nginx and Apache, making it suitable for personal and small business hosting environments. -
4
Claude-Red
claude-red is a curated library of offensive security skills
Claude Red is a curated collection of offensive-security skill files for Claude's skill system. Each skill provides structured domain guidance for a specific area of authorized security testing or research. The library covers web applications, identity, Active Directory, wireless systems, cloud environments, mobile platforms, embedded devices, reconnaissance, exploit research, and fuzzing. -
Build Securely on AWS with Proven FrameworksMoving to the cloud brings new challenges. How can you manage a larger attack surface while ensuring great network performance? Turn to Fortinet’s Tested Reference Architectures, blueprints for designing and securing cloud environments built by cybersecurity experts. Learn more and explore use cases in this white paper.
-
5
The Book of Secret Knowledge
A collection of inspiring lists, manuals, cheatsheets, blogs, hacks
...Its content spans areas such as Linux, networking, DevOps, security, databases, web infrastructure, shell usage, and productivity. The collection is useful for both quick lookup and broader exploration of technical topics. Its main value is centralizing many scattered resources into a single, community-maintained reference. -
6
Infosec Reference
An Information Security Reference That Doesn't Suck
Infosec Reference is a curated knowledge base and resource repository for information security practitioners. It aggregates cheat sheets, tooling guides, protocol deep dives, incident response playbooks, and threat actor profiles—all organized under accessible categories (network, web, host, cryptography, auditing). The repo is built as a living wiki of sorts: practitioners contribute updates, expand sections, or refine explanations as the threat landscape evolves. -
7
Atlantis iOS
A lightweight and powerful iOS framework for intercepting HTTP/HTTPS
Don't let cumbersome web debugging tools hold you back. With Proxyman's native macOS app, you can capture, inspect, and manipulate HTTP(s) traffic with ease. Intuitive, thoughtful, and built with meticulous attention to detail. Dive into the network level to diagnose and fix problems with reliable and powerful tools. Proxyman acts as a man-in-the-middle server that captures the traffic between your applications and SSL Web Server. With a built-in macOS setup, so you can inspect your... -
8
aws-devops-zero-to-hero
AWS zero to hero repo for devops engineers to learn AWS in 30 Days
aws-devops-zero-to-hero is a 30-day AWS learning roadmap aimed squarely at DevOps engineers who want both conceptual understanding and hands-on projects. The README is structured as a day-by-day syllabus, starting with “Day 1: Introduction to AWS” and moving through IAM, EC2, VPC networking, security, DNS (Route 53), storage (S3), and many other core services. Each day mixes explanation with at least one concrete project or lab, such as deploying applications on EC2, designing secure VPCs, setting up CI/CD pipelines, or configuring CloudWatch monitoring. Later in the curriculum, you move into topics like CloudFormation, CodeCommit/CodePipeline/CodeBuild/CodeDeploy, Terraform on AWS, CloudTrail and Config for compliance, Elastic Load Balancing, and cloud migration strategies. ... -
9
BurpSuite for Pentester
This cheatsheet is built for the Bug Bounty Hunters
BurpSuite for Pentester is a structured learning repository for web application security testing with Burp Suite. It is designed for penetration testers, bug bounty researchers, and learners who want a practical reference for Burp's major capabilities. The collection explains how different tools fit into vulnerability discovery, request analysis, and testing workflows. Covered areas include Proxy, Repeater, Intruder, Scanner, Sequencer, Collaborator, and several popular extensions. ... -
Host LLMs in Production With On-Demand GPUsDeploy your model, get an endpoint, pay only for compute time. No GPU provisioning or infrastructure management required.
-
10
CodeIgniter 4
Open Source PHP Framework (originally from EllisLab)
CodeIgniter4 is a powerful PHP framework designed for building web applications. It is a next-generation version of the popular CodeIgniter framework, offering enhanced features and improved performance. CodeIgniter4 follows the MVC (Model-View-Controller) pattern and is built to be lightweight, with a focus on simplicity and speed. It comes with a rich set of libraries and tools for developing dynamic web applications. -
11
Coraza
OWASP Coraza WAF is a golang modsecurity compatible firewall library
Coraza is an open-source, enterprise-grade, high-performance Web Application Firewall (WAF) ready to protect your beloved applications. It is written in Go, supports ModSecurity SecLang rulesets and is 100% compatible with the OWASP Core Rule Set. Coraza is a drop-in alternative to replace the soon-to-be abandoned Trustwave ModSecurity Engine and supports industry-standard SecLang rule sets. Coraza runs the OWASP Core Rule Set (CRS) to protect your web applications from a wide range of... -
12
FISSURE
The RF and reverse engineering framework for everyone
...The platform supports workflows related to signal discovery, demodulation, packet inspection, fuzzing, and attack simulation, making it useful for both defensive research and controlled lab testing. Its architecture is oriented toward extensibility, so users can integrate additional hardware, signal-processing components, and protocol-specific modules depending on their needs. -
13
Cap CAPTCHA
The privacy-first, self-hosted CAPTCHA for the modern web
...It replaces invasive tracking-based CAPTCHA solutions with a lightweight approach based on proof-of-work and client-side instrumentation. The system can be deployed independently, giving developers full control over user data and verification processes. It integrates easily into web applications and focuses on maintaining usability while preventing automated abuse. Cap avoids reliance on centralized providers, reducing dependency on external services and improving privacy compliance. Its design reflects a shift toward decentralized, user-respecting security mechanisms. It is particularly suited for developers who want transparent and customizable bot protection. -
14
JavaTutorial
Ten years of experience as a veteran driver in Java technology
Java Tutorial is a large Chinese-language knowledge base built from years of practical Java development experience. It connects core Java material with Java EE, web applications, servers, build systems, testing, monitoring, and deployment tools. The web section covers Servlets, JSP, filters, listeners, cookies, sessions, Tomcat, Jetty, and Nginx. Development tooling includes Maven, Ant, major IDEs, serializers, template engines, logging libraries, and testing utilities. Framework and middleware coverage includes MyBatis, Spring, Spring Boot, security tools, messaging systems, caches, and distributed services. ... -
15
NGINX Admin’s Handbook
How to improve NGINX performance, security, and other important things
...The handbook spans fundamentals and advanced topics alike, from HTTP and SSL/TLS basics to reverse proxy patterns, performance tuning, debugging workflows, and hardening strategies. A centerpiece is its prioritized checklist of 79 rules, grouped by criticality, helping readers focus on what most impacts security, reliability, and speed. Instead of copy-paste snippets in isolation, it emphasizes understanding trade-offs, avoiding common pitfalls, and balancing security with usability. Designed for system administrators and web application engineers, it aims to be a living companion that encourages experimentation, measurement, and continuous improvement of NGINX configurations -
16
x-ui-yg
The x-ui simplified and modified version of the script
...The project also integrates additional features such as certificate management and compatibility with modern transport protocols. While it offers ease of use, it also highlights security considerations, encouraging the use of HTTPS and proper authentication for panel access. Overall, x-ui-yg is a lightweight yet powerful management solution for proxy infrastructure. -
17
Redwood
The App Framework for Startups
Focus on building your startup, not fighting your framework. Redwood is the full-stack web framework designed to help you grow from side project to startup. Our mission is to help more startups explore more territory, more quickly. We begin by crafting a more integrated framework. We’ve chosen the world’s most popular rendering engine to power Redwood’s web frontend. With React, you’ll have your pick of learning materials, design systems, and trained employees. As your project grows, so will... -
18
sperm
Collection of reverse engineering articles curated for learning
sperm is a curated repository that gathers a collection of notable articles related to reverse engineering and software analysis. It primarily acts as a knowledge archive where previously published technical posts are compiled and organized for easier access and long-term reference. These articles originate from multiple technical communities and platforms and are exported into Markdown format to maintain a consistent and readable structure. sperm focuses on educational material that... -
19
Apache Shiro
Apache Shiro
Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management. With Shiro’s easy-to-understand API, you can quickly and easily secure any application, from the smallest mobile applications to the largest web and enterprise applications. -
20
Elide
Elide is a Java library that lets you stand up a GraphQL/JSON-API
Model-driven {json:api} & GraphQL web services for CRUD and Analytics. Elide is a Java library that enables you to stand up JSON API or GraphQL web services in 4 simple steps. Define a JPA annotated model including relationships to other models using Java, Kotlin, Groovy, and other JVM languages. Control access to fields and entities through a declarative, intuitive permission syntax. Make instances of your new model accessible through a top level collection or restrict access only through... -
21
NelmioCorsBundle
Adds CORS (Cross-Origin Resource Sharing) headers support
NelmioCorsBundle is a Symfony bundle that manages Cross-Origin Resource Sharing (CORS) headers, allowing controlled access to resources across different domains. It simplifies enabling and configuring CORS policies for APIs and web applications, ensuring secure and flexible cross-origin interactions with minimal configuration. -
22
templUI
A growing collection of beautifully designed UI components for Go
templUI is a modern UI component library built specifically for Go applications using the templ templating language, offering a developer-first approach to building interfaces with strong type safety and performance. It provides a growing collection of beautifully designed, production-ready components styled with Tailwind CSS, allowing developers to construct modern web interfaces without relying on heavy frontend frameworks. One of its defining principles is code ownership, meaning developers can either import components directly or copy them into their projects using a CLI, ensuring full control over customization and long-term maintenance. The library avoids JavaScript frameworks entirely, instead relying on lightweight, vanilla implementations that prioritize speed and simplicity. templUI also emphasizes security and compliance, with features such as CSP-friendly rendering and no inline scripts, making it suitable for enterprise environments. -
23
Silverstripe CMS
Silverstripe CMS - this is a module for Silverstripe Framework
Silverstripe CMS is an intuitive content management system and flexible framework loved by editors and developers alike. Equip your web teams to achieve outstanding results. Silverstripe CMS fits the outcomes you want and doesn't force your business outcomes into an out-of-the-box solution. Customize to your needs. You can be the CMS expert in no time. Get started quickly and deliver your content to your users fast. Don’t stay awake at night worrying! Silverstripe CMS is solid as a rock, with enterprise-level security and support, so you can rest easy. ... -
24
books-collection
To the programmer's open source and free books collection
...Its maintainers state that listed resources are reviewed manually before inclusion. The collection contains both Chinese and English material, with markers identifying language and downloadable files. Topics include databases, security, Java, Go, Python, Rust, web development, JavaScript, Node.js, CSS, Linux, architecture, cloud computing, operating systems, and artificial intelligence. Entries link to official manuals, specifications, tutorials, ebooks, reference guides, and community translations. The repository acts as a discovery index rather than hosting or reading every book itself. ... -
25
ExpressJS.com
The Express.js Website
This repository contains the source for the Express web site and documentation, the canonical reference for developers using the Express framework. It organizes material into API reference, getting-started guides, best practices, and topic-focused explanations such as routing, middleware, error handling, templating, and performance. Versioned docs help readers match API behavior to the framework version they’re running, reducing confusion during upgrades.
