AppThreat / atom
atom is a novel intermediate representation for applications and a standalone tool that is powered by chen.
β65Updated this week
Alternatives and similar repositories for atom:
Users that are interested in atom are comparing it to the libraries listed below
- Code Hierarchy Exploration Net (chen)β20Updated this week
- Manager of third-party sources of Semgrep rules πβ81Updated 9 months ago
- Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.1, purl, and versβ¦β114Updated last week
- A very simple open source implementation of Google's Project Naptimeβ142Updated last month
- π§ͺ Correlate Semgrep scans with Python test coverage to prioritize SAST findings and get bug fix suggestions via a self-hosted LLM.β39Updated 5 months ago
- ChainReactor is a research project that leverages AI planning to discover exploitation chains for privilege escalation on Unix systems. Tβ¦β44Updated 6 months ago
- Trail of Bits Testing Handbookβ72Updated last month
- XBOW Validation Benchmarksβ88Updated 8 months ago
- Generative and mutative fuzzer for Kubernetes admission controller chains by automatically parsing the cluster api specification.β74Updated last year
- Focused malicious code detection ruleset, with a high protection-to-noise ratioβ117Updated 2 months ago
- A compilation of Software Supply Chain Security resources including initiatives, standards, regulations, organizations, vendors, tooling,β¦β133Updated last year
- CodeQL queries developed by Trail of Bitsβ97Updated 3 weeks ago
- A taxonomy of attacks on software supply chains in the form of an attack tree, based on and linked to numerous real-world incidents and oβ¦β75Updated last week
- β72Updated last week
- Create notes during a security code review in VSCode π Import your favorite SAST tool findings π οΈ and collaborate with others π€β133Updated last month
- β114Updated last year
- A collection of Semgrep rules which followed security guidelines for .NET and Java.β22Updated 3 years ago
- πA cutting edge context aware GraphQL API fuzzing tool!β140Updated 3 weeks ago
- An open-source dataset of malicious software packages found in the wild, 100% vetted by humans.β203Updated this week
- Code Pathfinder, the open-source alternative to GitHub CodeQL built with GoLang. Built for advanced structural search, derive insights, fβ¦β58Updated last week
- β63Updated 3 months ago
- Analysis of the Enterprise SAST/DAST product landscapeβ37Updated last year
- The OpenSSF CVE Benchmark consists of code and metadata for over 200 real life CVEs, as well as tooling to analyze the vulnerable codebasβ¦β142Updated last year
- boostsecurityio/lotpβ124Updated last month
- β43Updated 10 months ago
- future-proof vulnerability detection benchmark, based on CVEs in open-source reposβ52Updated this week
- Prototype of Full Agentic Application Security Testing, FAAST = SAST + DAST + LLM agentsβ43Updated last week
- A Risk-Based Prioritization Taxonomy for prioritizing CVEs (Common Vulnerabilities and Exposures).β75Updated last year
- β71Updated 2 weeks ago
- FastCVE - fast, rich and API-based search for CVE and more (CPE, CWE, CAPEC)β49Updated 3 weeks ago