Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

An open source threat modeling tool from OWASP

secureCodeBox (SCB) - continuous secure delivery out of the box

Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server. GPT: https://chatgpt.com/g/g-673bfeb4037481919be8a2cd1bf868d2-cdxgen

Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF

The OWASP SecureTea Project provides a one-stop security solution for various devices (personal computers / servers / IoT devices)

OWASP SecurityRAT (version 1.x) - Tool for handling security requirements in development

OWASP ASST (Automated Software Security Toolkit) | A Novel Open Source Web Security Scanner.

OWASP PTK - application security browser extension.

Zed Attack Proxy Scripts for finding CVEs and Secrets.

Documentation for Essential Node.js Security

Create CycloneDX Software Bill of Materials (SBOM) from Node.js NPM projects.

Demo - how to easily build security testing for Web App, using Zap and Glue

A command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration.

nodejs + express security and performance boilerplate.

Additional Resources For Securing The Stack Tutorials

Cosmos Market Apps Build By TinyActive

A Common Weakness Enumeration (CWE) Node.js SDK compliant with MITRE / CAPEC

An ultra-compact intro (or refresher) to Web Application Security.