owasp-noir's tracked open-source repos, sorted by stars.
Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.