OWASP / Top10

Official repository for the OWASP Top 10 document, a ranked list of the most critical web application security risks.

OWASP / ASVS

Application Security Verification Standard

OWASP / wrongsecrets

Vulnerable app with examples showing how to not use secrets

OWASP / www-community

OWASP Community Pages are a place where OWASP can accept community contributions for security-related content.

OWASP / owasp.github.io

OWASP Foundation main site repository

OWASP / www-project-web-security-testing-guide

The Web Security Testing Guide (WSTG) Project produces the premier cybersecurity testing resource for web application developers and security professionals.

m0m0x01d / strata

See why a web vulnerability works, not just how to trigger it — a single-file, zero-dependency security lab that renders a vulnerable app as a 7-layer cross-section. 17 labs, attacker & defender modes, AI-authorable.