Repositories list

• homebrew-cli

  Public
  About Homebrew repo for the StackHawk CLI

  Ruby

  •0•0•0•0•Updated Jan 15, 2026Jan 15, 2026

• training-labs

  Public
  0•3•0•0•Updated Jan 9, 2026Jan 9, 2026

• stackhawk-mcp

  Public
  Python

  •

  Other

  •3•5•1•1•Updated Nov 14, 2025Nov 14, 2025

• vuln-graphql-api

  Public
  A very vulnerable implementation of a GraphQL API.

  TypeScript

  •34•8•0•2•Updated Oct 16, 2025Oct 16, 2025

• hawkscan-action

  Public
  🦅 Run a StackHawk scan in GitHub Actions

  JavaScript

  •

  MIT License

  •10•28•1•10•Updated Jul 2, 2025Jul 2, 2025

• stackhawk-orb

  Public
  🔮 The CircleCI stackhawk/stackhawk orb

  2•3•0•3•Updated Jul 2, 2025Jul 2, 2025

• ast-monorepo

  Public
  Shell

  •

  MIT License

  •0•0•0•0•Updated Feb 12, 2025Feb 12, 2025

• ast-typescript-express-1

  Public
  Node.js REST API clean architecture sample project.

  TypeScript

  •

  MIT License

  •18•0•0•0•Updated Jan 6, 2025Jan 6, 2025

• ast-javascript-express-1

  Public
  A node.js sample application that demonstrates an architecture for building a complete production API with Node.JS, Express.JS and MongoDB

  JavaScript

  •

  MIT License

  •19•0•0•0•Updated Jan 6, 2025Jan 6, 2025

• ast-java-spring-boot-3

  Public
  Java

  •

  MIT License

  •0•0•0•0•Updated Jan 3, 2025Jan 3, 2025

• ast-java-spring-boot-1

  Public
  REST APIs implemented using Spring Boot, in-memory database, embedded Tomcat, Swagger 2, JsonPath, Hamcrest and MockMVC

  Java

  •

  MIT License

  •847•0•0•0•Updated Jan 3, 2025Jan 3, 2025

• ast-java-spring-boot-2

  Public
  This repository is an example application for the Spring Boot framework. The example is a standalone REST API server in Java. This repository shows the followin…

  Java

  •1•1•0•0•Updated Dec 20, 2024Dec 20, 2024

• javaspringvulnycbaz

  Public archive
  javaspringvulny - a Spring Boot web application built wrong on purpose

  Java

  •262•0•0•0•Updated Feb 14, 2024Feb 14, 2024

• django-DefectDojo

  Public
  DefectDojo is an open-source application vulnerability correlation and security orchestration tool.

  HTML

  •

  BSD 3-Clause "New" or "Revised" License

  •1.8k•0•0•0•Updated Jun 5, 2023Jun 5, 2023

• code-example-hawk-api

  Public
  📘 A sample UI code project for front-end candidates to implement

  Kotlin

  •11•1•0•2•Updated Jan 24, 2023Jan 24, 2023

• zap-extensions

  Public
  OWASP ZAP Add-ons

  automation-ignored

  Java

  •

  Apache License 2.0

  •767•2•0•0•Updated May 4, 2021May 4, 2021

• vuln-graphql-ruby

  Public archive
  Ruby GraphQL target with HawkScan integration

  Ruby

  •4•0•0•0•Updated Mar 31, 2021Mar 31, 2021

• zap-api-java

  Public archive
  OWASP ZAP Java API

  Java

  •

  Apache License 2.0

  •41•0•0•0•Updated Sep 7, 2020Sep 7, 2020

• vuln_django_play

  Public archive
  A vulnerable Django App to test against

  JavaScript

  •3•3•0•1•Updated Jun 30, 2020Jun 30, 2020

• vuln-graphql-prisma

  Public
  🚀 Ready-to-run Prisma example projects

  TypeScript

  •

  Apache License 2.0

  •1.5k•1•0•0•Updated Jun 9, 2020Jun 9, 2020

• vuln-graphql-poc

  Public
  Research on GraphQL from an AppSec point of view.

  Java

  •

  MIT License

  •60•1•0•0•Updated Jun 9, 2020Jun 9, 2020

• HawkscanExamples

  Public
  A repo of configuration examples for StackHawk's Hawkscan!

  0•3•1•0•Updated Mar 4, 2020Mar 4, 2020