Repositories list

• mcp-client-and-proxy

  Public

  appsecco/mcp-client-and-proxy’s past year of commit activity
  A universal MCP client with proxying feature to interact with MCP Servers which support STDIO transport.

  pythonproxymcp+ 10

  pythonproxymcptraffic-analysispenetration-testingpentestingsecurity-testingai-securityburp-suitemcp-client+ 3

  Python

  •

  MIT License

  •33 forks•1717 stars•00 issues•00 pull requests•Updated Apr 17, 2026Apr 17, 2026

• pentesting-mcp-servers-checklist

  Public
  A practical, community-driven checklist for pentesting MCP servers. Covers traffic analysis, tool-call behavior, namespace abuse, auth flows, and remote server …

  mcppenetration-testingpentesting+ 7

  mcppenetration-testingpentestingsecurity-checklistai-securityllm-securityagentic-aimcp-servermcp-securityappsecco

  Creative Commons Attribution 4.0 International

  •55 forks•3131 stars•00 issues•00 pull requests•Updated Apr 7, 2026Apr 7, 2026

• vulnerable-mcp-servers-lab

  Public

  appsecco/vulnerable-mcp-servers-lab’s past year of commit activity
  A collection of servers which are deliberately vulnerable to learn Pentesting MCP Servers.

  mcphackingpentesting+ 8

  mcphackingpentestingbugbountyai-researchmcp-servermcp-clientvulnerable-labsai-red-teamingappsecco+ 1

  JavaScript

  •

  MIT License

  •4646 forks•250250 stars•00 issues•11 pull request•Updated Dec 18, 2025Dec 18, 2025

• raptor

  Public

  appsecco/raptor’s past year of commit activity
  Raptor turns Claude Code into a general-purpose AI offensive/defensive security agent. By using Claude.md and creating rules, sub-agents, and skills, we configu…

  Python

  •

  MIT License

  •347347 forks•11 star•00 issues•00 pull requests•Updated Dec 2, 2025Dec 2, 2025

• dvcsharp-api

  Public

  appsecco/dvcsharp-api’s past year of commit activity
  Damn Vulnerable C# Application (API)

  C#

  •

  MIT License

  •287287 forks•8080 stars•44 issues•66 pull requests•Updated Jul 15, 2024Jul 15, 2024

• kubernetes-ptaas-scripts

  Public

  appsecco/kubernetes-ptaas-scripts’s past year of commit activity
  Scripts to generate kubeconfig files required to perform a PT.

  Shell

  •

  MIT License

  •00 forks•11 star•00 issues•00 pull requests•Updated Apr 29, 2024Apr 29, 2024

• dvna

  Public

  appsecco/dvna’s past year of commit activity
  Damn Vulnerable NodeJS Application

  nodejstestingsecurity+ 6

  nodejstestingsecurityhackowaspvulnerableowasp-top-10vulnerable-appsdvna

  SCSS

  •

  MIT License

  •882882 forks•768768 stars•22 issues•1313 pull requests•Updated Mar 27, 2024Mar 27, 2024

• dvja

  Public

  appsecco/dvja’s past year of commit activity
  Damn Vulnerable Java (EE) Application

  javadockervulnerable-app

  javadockervulnerable-app

  CSS

  •

  MIT License

  •549549 forks•148148 stars•22 issues•1616 pull requests•Updated Jan 23, 2024Jan 23, 2024

• kubeseco

  Public

  appsecco/kubeseco’s past year of commit activity
  Application Security Workflow Automation using Docker and Kubernetes

  JavaScript

  •

  MIT License

  •1010 forks•2323 stars•22 issues•66 pull requests•Updated Dec 11, 2022Dec 11, 2022

• breaking-and-pwning-apps-and-servers-aws-azure-training

  Public

  appsecco/breaking-and-pwning-apps-and-servers-aws-azure-training’s past year of commit activity
  Course content, lab setup instructions and documentation of our very popular Breaking and Pwning Apps and Servers on AWS and Azure hands on training!

  opensourcepenetration-testingfree+ 4

  opensourcepenetration-testingfreeapplication-securitypentestingaws-securityazure-security

  CSS

  •

  MIT License

  •256256 forks•951951 stars•11 issue•00 pull requests•Updated Nov 26, 2022Nov 26, 2022

• sqlinjection-training-app

  Public

  appsecco/sqlinjection-training-app’s past year of commit activity
  A simple PHP application to learn SQL Injection detection and exploitation techniques.

  exploitsql-injectionapplication-security+ 7

  exploitsql-injectionapplication-securityweb-securityappsecvulnerable-web-appowasp-top-10owasp-top-tenvulnerable-appstraining-app

  PHP

  •

  MIT License

  •5959 forks•127127 stars•00 issues•22 pull requests•Updated Oct 18, 2022Oct 18, 2022

• prowler-aws-securityhub-integration

  Public

  appsecco/prowler-aws-securityhub-integration’s past year of commit activity
  Using Prowler to Automate Compliance Checks for AWS CIS Benchmarks

  Python

  •

  MIT License

  •66 forks•99 stars•00 issues•00 pull requests•Updated Oct 11, 2022Oct 11, 2022

• django-rev-shell

  Public
  A simple django app to provide a reverse shell when deployed and invoked.

  Python

  •

  MIT License

  •66 forks•55 stars•00 issues•00 pull requests•Updated May 30, 2022May 30, 2022

• vulnerable-apps

  Public
  dockersecurityansible+ 3

  dockersecurityansibleapplicationslabsvulnerabilities

  Python

  •

  Apache License 2.0

  •6363 forks•219219 stars•00 issues•00 pull requests•Updated Mar 25, 2022Mar 25, 2022

• opa-traefik-microservice-authz

  Public
  Proof of concept implementation of a scenario using Open Policy Agent for microservices authorization in API Gateway (Traefik).

  JavaScript

  •

  MIT License

  •88 forks•4343 stars•00 issues•11 pull request•Updated Jan 5, 2021Jan 5, 2021

• raneto-docker

  Public
  Docker container for Markdown based Raneto Knowledgebase

  dockermarkdowndevops+ 3

  dockermarkdowndevopsautomationknowledgebaseraneto

  JavaScript

  •1414 forks•4040 stars•00 issues•11 pull request•Updated Dec 28, 2020Dec 28, 2020

• sqlinjectionloginbypass

  Public
  A simple app to demo SQL Injection login bypass

  PHP

  •

  MIT License

  •1919 forks•2626 stars•00 issues•00 pull requests•Updated Dec 15, 2020Dec 15, 2020

• anchore-engine

  Public
  A service that analyzes docker images and applies user-defined acceptance policies to allow automated container image validation and certification

  Python

  •

  Apache License 2.0

  •271271 forks•00 stars•00 issues•00 pull requests•Updated Sep 10, 2020Sep 10, 2020

• asn-search-api

  Public
  A Golang API over MaxMind ASN database

  Go

  •

  MIT License

  •22 forks•22 stars•00 issues•00 pull requests•Updated Jul 30, 2020Jul 30, 2020

• container-image-scanner-api

  Public
  A minimalist Go API to scan Docker images for security vulnerabilities and weaknesses

  Go

  •

  MIT License

  •33 forks•22 stars•00 issues•00 pull requests•Updated Jul 30, 2020Jul 30, 2020

• CloudPentestCheatsheets

  Public
  This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

  MIT License

  •556556 forks•2222 stars•00 issues•00 pull requests•Updated Jun 14, 2020Jun 14, 2020

• kube-scan

  Public

  appsecco/kube-scan’s past year of commit activity
  kube-scan: Octarine k8s cluster risk assessment tool

  Go

  •

  MIT License

  •107107 forks•11 star•00 issues•00 pull requests•Updated May 11, 2020May 11, 2020

• attacking-cloudgoat2

  Public
  A step-by-step walkthrough of CloudGoat 2.0 scenarios.

  awsdocumentationpentesting+ 5

  awsdocumentationpentestingwalkthroughaws-securitycloud-securitypentesting-resourcescloudgoat

  MIT License

  •5050 forks•136136 stars•00 issues•00 pull requests•Updated Apr 28, 2020Apr 28, 2020

• kccss

  Public
  Kubernetes Common Configuration Scoring System

  TypeScript

  •

  MIT License

  •2121 forks•00 stars•00 issues•00 pull requests•Updated Apr 23, 2020Apr 23, 2020

• secrets-in-google-cloud-run-with-google-cloud-build

  Public
  Baking secrets in Google Cloud Run containers using Google Cloud Build

  Python

  •

  MIT License

  •22 forks•22 stars•00 issues•00 pull requests•Updated Mar 18, 2020Mar 18, 2020

• devsecops-using-cloudnative-workshop

  Public
  This repo contains workshop material delivered at #nullcon2020

  HTML

  •

  MIT License

  •1414 forks•1616 stars•00 issues•11 pull request•Updated Mar 6, 2020Mar 6, 2020

• VyAPI

  Public
  VyAPI - A cloud based vulnerable hybrid Android App

  application-securityaws-cognitomobile-security+ 1

  application-securityaws-cognitomobile-securityvulnerable-app

  Java

  •

  MIT License

  •2626 forks•8686 stars•11 issue•00 pull requests•Updated Feb 21, 2020Feb 21, 2020

• spaces-finder

  Public
  A tool to hunt for publicly accessible DigitalOcean Spaces

  osintinfosecpentesting+ 4

  osintinfosecpentestingreconreconnaissancedigitalocean-spacesspaces-finder

  Python

  •

  MIT License

  •2929 forks•156156 stars•00 issues•00 pull requests•Updated Jan 21, 2020Jan 21, 2020

• defcon-26-workshop-attacking-and-auditing-docker-containers

  Public
  DEF CON 26 Workshop - Attacking & Auditing Docker Containers Using Open Source

  dockersecuritysecurity-audit+ 4

  dockersecuritysecurity-auditopensourcecontainerspentestingdefcon

  4141 forks•108108 stars•00 issues•11 pull request•Updated Nov 18, 2019Nov 18, 2019

• c0c0n-2019-ctf-writeups

  Public
  CTF write-ups from c0c0n 2019 CTF challenges that we participated

  MIT License

  •44 forks•77 stars•00 issues•00 pull requests•Updated Oct 5, 2019Oct 5, 2019