Highlights
- Pro
Stars
A next-generation crawling and spidering framework.
Prevent merging of malicious code in pull requests
View HTTP/HTTPS requests made by any Linux program
Cloud replacement for vacuum robots enabling local-only operation
Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs. Discord https://discord.gg/vv4MH284Hc
PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
๐ Static code analysis engine to find security issues in code.
An IAM Simulator that outputs detailed explains of how a request was evaluated.
Automated vulnerability discovery and annotation
GoCrack is a management frontend for password cracking tools written in Go
Zero shot vulnerability discovery using LLMs
Template Go app repo with local test/lint/build/vulnerability check workflow, and on tag image test/build/release pipelines, with ko generative SBOM, cosign attestation, and SLSA build provenance
Open source O-RAN 5G CU/DU solution from Software Radio Systems (SRS) https://docs.srsran.com/projects/project
๐ฆ Produce secure packages and containers with declarative configurations
Open source templates you can use to bootstrap your security programs
Octoscan is a static vulnerability scanner for GitHub action workflows.
FlowAnalyzer is a tool to help in testing and analyzing OAuth 2.0 Flows, including OpenID Connect (OIDC).
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
An API security tool to capture and analyze API traffic, test API endpoints, reconstruct Open API specification, and identify API security risks.ย
A simple mitmproxy blueprint to intercept HTTPS traffic from app running on Kubernetes
Protect against subdomain takeover