XSS Filter Evasion Cheat Sheet - OWASP : This article is focused on providing application security testing professionals with a guide to assist in Cross Site Scripting testing.
API Security Checklist : Checklist of the most important security countermeasures when designing, testing, and releasing your API.
TruffleHog : TruffleHog is an open-source SAST (static application security testing) tool for detecting secrets in various sources. While GitHub and GitLab reposit...
Security Headers : I built securityheaders.io after deploying security headers like CSP and HSTS to my own site. I wanted a quick and easy way to check if other sites we...
WebScarab : WebScarab is a framework for analysing applications that communicate using the HTTP and HTTPS protocols.
The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.