security-testing

Simple Java Client & Tests for SSL Labs

This project extends RestTestGen, a black-box REST API fuzzer with native support for the WFC standard. The work covers WFC Authentication (and a novel signupEndpoint extension), WFC Fault, WFC report, and a curated test dataset of 17 Dockerized open-source REST APIs.

Philly Codefest Project: A school security software application built in Java that works to prevent school shootings and other threats.

46 Selenium regression tests for a PHP/MySQL security app: auth, 2FA, password reset, RBAC and upload validation. Found 7 defects including two account-enumeration disclosures.

Local-only Burp Suite bridge for redacted, reviewable ExploitSpec security regression starters

StyleMate E-commerce Testing: StyleMate is a fashion and apparel platform offering a seamless shopping experience. The project includes automation testing with Selenium, TestNG, and POM, plus performance testing via Apache JMeter and security testing with Burp Suite.

Demo repository for TestKube - a opinionated and friendly Kubernetes testing framework!

Deliberately vulnerable minimal Spring Boot app: 4 unambiguous seeds (CWE-89/78/918/502) + secure counterparts. SAST oracle fixture for cogniumhq/sast-benchmarks and sast-validation. Never deploy.

A deliberately insecure Java web application

Continuous Security Testing in Microservices and Cloud Native Applications

Projects from CS 1632 ~ Software Quality Assurance

Verification, validation & security testing of a Spring Boot + React hospital system: 88 test cases, Selenium-automated functional suite, JMeter, OWASP ZAP

Enterprise-grade Android Mobile Test Automation Framework using Java 17, Appium, TestNG, and Page Object Model (POM). Features E2E UI testing, Functional suites, OWASP MASVS-aligned Mobile Security testing, interactive ExtentReports, and GitHub Actions CI/CD.

E2E Playwright TypeScript test suite for Altoro Mutual banking app — includes SQL injection vulnerability discovery

Specialized fork of Testsigma optimized for automated security testing

Burp Suite extension: automated IDOR detection via three-way response comparison

University job board reviewed as unfamiliar code: twelve findings including an authentication bypass via a client-supplied header, each fixed and held by a regression test.

Deliberately-vulnerable Java+Kotlin claims agent framework: security-scanner validation fixture (do not use)

Integrate Zero Threat AI Security Scanner with your Jenkins CI/CD pipeline