Pinned Loading

1. devsecops-gitlab-pipeline-security devsecops-gitlab-pipeline-security Public

   DevSecOps security pipeline with GitLab CI/CD, Semgrep, Gitleaks, npm audit, Docker, and Trivy.

   JavaScript

2. pentest-web-juice-shop pentest-web-juice-shop Public

   Web application penetration testing project against OWASP Juice Shop, covering SQL Injection, Reflected XSS, Stored XSS and DOM XSS with Burp Suite, evidence, findings and remediation.

3. api-security-crapi api-security-crapi Public

   API security assessment against OWASP crAPI focused on OWASP API Security Top 10, BOLA, Excessive Data Exposure, authentication review, authorization testing, evidence collection, and remediation r…