Group: OWASP

Group OWASP AppSensor

Group OWASP Encoder

Group OWASP ESAPI

Group OWASP AntiSamy

OWASP AntiSamy

dependency-check-core is the engine and reporting tool used to identify and report if there are any known, publicly disclosed vulnerabilities in the scanned project's dependencies. The engine extracts meta-data from the dependencies and uses this to do fuzzy key-word matching against the Common Platfrom Enumeration (CPE), if any CPE identifiers are found the associated Common Vulnerability and Exposure (CVE) entries are added to the generated report.

OWASP dependency-check is a utility that attempts to detect publicly disclosed vulnerabilities contained within project dependencies.

dependency-check-utils is a collection of common utility classes used within dependency-check that might be useful in other projects.

OWASP CSRFGuard is a library that implements a variant of the synchronizer token pattern to mitigate the risk of Cross-Site Request Forgery (CSRF) attacks.

Group OWASP JBroFuzz

Group OWASP Passfault

dependency-check-maven is a Maven Plugin that uses dependency-check-core to detect publicly disclosed vulnerabilities associated with the project's dependencies. The plugin will generate a report listing the dependency, any identified Common Platform Enumeration (CPE) identifiers, and the associated Common Vulnerability and Exposure (CVE) entries.

The OWASP Security Logging project provides developers and ops personnel with APIs for logging security-related events.

The OWASP Security Logging project provides developers and ops personnel with APIs for logging security-related events.

OWASP AntiSamy Sample Configs

dependency-check-ant is an Ant Task that uses dependency-check-core to detect publicly disclosed vulnerabilities associated with the project's dependencies. The task will generate a report listing the dependency, any identified Common Platform Enumeration (CPE) identifiers, and the associated Common Vulnerability and Exposure (CVE) entries.

Group OWASP WebGoat

Dependency Check Plugin Archetype

The OWASP Java File I/O Security Project provides an easy to use library for validating and sanitizing filenames, directory paths, and uploaded files.

Encoder