Resources
DevSecOps
hahwul/DevSecOps
DevSecOps is a curated roadmap and resource collection that organizes tools, articles and guidance across the design, develop, build, test, deploy and operate phases.
Topics
Related projects
DevSecOps6.9kThe Ultimate DevSecOps library is a curated awesome-list that organizes open-source security tools and methodologies by topic such as SAST, DAST, supply chain, and Kubernetes.
WebHackersWeapons5.1kWebHackersWeapons is a curated awesome-list of tools used by web security researchers and bug hunters. It catalogs scanners, proxies, recon utilities, bookmarklets and extensions by type, with links and language tags.- MobileHackersWeapons1.3kMobileHackersWeapons is a curated awesome-list of tools used by mobile security researchers, organized by platform and purpose across iOS and Android.
- dalfox5.4kDalfox is a fast, open-source XSS scanner written in Rust. It automates parameter analysis, reflected, stored and DOM-based XSS detection, WAF fingerprinting and reporting, with a CLI, REST API and MCP server for security testing workflows.
kics2.7kKICS is Checkmarx's open-source scanner for infrastructure-as-code. It uses customizable queries to find security vulnerabilities, compliance issues and misconfigurations in Terraform, Kubernetes, Docker, CloudFormation and many other IaC platforms.
cve-bin-tool1.8kA command-line scanner that finds known CVEs in binaries and SBOMs by detecting bundled components, generating reports and integrating with CI pipelines.