Morningstar / GoASQLinks
General Open Architecture Security Questionnaire
☆32Updated 2 years ago
Alternatives and similar repositories for GoASQ
Users that are interested in GoASQ are comparing it to the libraries listed below
Sorting:
- Custom Fortify SCA rules to detect common JSSE certification validation flaws☆11Updated 9 years ago
- Automated SonarQube☆70Updated 6 years ago
- Automate security tests using Burp Suite.☆229Updated last year
- Owasp Orizon is a source code static analyzer tool designed to spot security issues in Java applications.☆144Updated 8 years ago
- Vendor-Neutral Security Tool Automation Controller (over REST)☆28Updated 6 years ago
- Web Input Vector Extractor Teaser☆132Updated 3 years ago
- A BurpSuite plugin to detect Same Origin Method Execution vulnerabilities☆60Updated 8 years ago
- A tool for detecting XML External Entity (XXE) vulnerabilities in Java applications☆72Updated 11 years ago
- Tests for different parsers from Ruby, Python, .NET, PHP, Perl, Java☆56Updated 9 years ago
- An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions☆124Updated 7 years ago
- ☆71Updated 7 years ago
- A proof of concept that demonstrates asynchronous scanning for Java deserialization bugs☆55Updated 8 years ago
- PoC for CVE-2018-1002105.☆223Updated 6 years ago
- A Java Web Application with common legacy security flaws for tests with Arachni Scanner and ModSecurity☆21Updated last year
- Burp extension to help developers replicate findings from pen tests☆70Updated last year
- ☆46Updated 9 years ago
- A collection of various scripts and automations to simplify Checkmarx SAST and IAST setup and use☆14Updated 7 years ago
- Baseline IoT security checklist. Consider security as early in development as possible and reap the rewards.☆30Updated 8 years ago
- Ruby interface to cirt.net default passwords database☆19Updated 14 years ago
- Burp Suite plugin created for using Collaborator tool during manual testing in a comfortable way!☆105Updated 7 years ago
- Snort rules☆35Updated 6 years ago
- DEF CON 26 Workshop - Attacking & Auditing Docker Containers Using Open Source☆108Updated 5 years ago
- Security Testing is not as simple as right click > Scan. It's messy, a tough game. What if you had missed to test just that one thing and…☆276Updated last year
- WAF Research☆183Updated 3 years ago
- The Web Audit Search Engine - Index and Search HTTP Requests and Responses in Web Application Audits with ElasticSearch☆114Updated 4 years ago
- Script to test if a server is vulnerable to the JetLeak vulnerability☆144Updated 9 years ago
- A Java serializer in JavaScript☆81Updated 7 years ago
- Spring messaging STOMP protocol RCE☆113Updated 7 years ago
- a passive scanner based on Mitmproxy and Arachni☆110Updated 8 years ago
- Writeup of CVE-2017-1002101 with sample "exploit"/escape☆35Updated 7 years ago