🔒 Build a secure application with robust authentication and authorization using Spring Boot and Angular, ensuring safe user roles and access control.

GraphQL Security Project

A Scala-based implementation of a subset of the OWASP/ModSecurity SecLang language, built to efficiently execute the OWASP Core Rule Set (CRS) with user based customizations in highly concurrent and multi-tenant environments.

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Vulnerable app with examples showing how to not use secrets

Collection of Spring.io guide implementations for structured Java/Spring practice.

Java web and command line applications demonstrating various security topics

Main repository for the official Dependency-Track Jenkins plugin

Gradle based Java project for general purpose testing

The aim of this project is to protect Java applications against CSRF attacks with the use of Synchronizer Tokens

A Spring Boot application exposing OWASP ZAP as an MCP (Model Context Protocol) server. It lets any MCP‑compatible AI agent (e.g., Claude Desktop, Cursor) orchestrate ZAP actions—spider, active scan, import OpenAPI specs, and generate reports.

🚀 Free vulnerability scanner for Maven projects. Detect CVEs, track security trends, and generate comprehensive reports. Built on OWASP Dependency-Check with enterprise-grade performance.

OWASP VulnerableApp Project: For Security Enthusiasts by Security Enthusiasts.

completely ridiculous API (crAPI)

Creates CycloneDX Software Bill of Materials (SBOM) from Gradle projects

Maven based Java project for general purpose testing

CycloneDX SBOM Model and Utils for Creating and Validating BOMs

Maven plugin that integrates with a Dependency Track server to submit dependency manifests and optionally fail execution when vulnerable dependencies are found.

Creates CycloneDX Software Bill of Materials (SBOM) from Maven projects

🛡️ Информационная безопасность: Лабораторная работа №1