Morningstar / GoASQLinks
General Open Architecture Security Questionnaire
☆32Updated 2 years ago
Alternatives and similar repositories for GoASQ
Users that are interested in GoASQ are comparing it to the libraries listed below
Sorting:
- Custom Fortify SCA rules to detect common JSSE certification validation flaws☆11Updated 10 years ago
- Automated SonarQube☆70Updated 6 years ago
- Automate security tests using Burp Suite.☆232Updated last year
- Owasp Orizon is a source code static analyzer tool designed to spot security issues in Java applications.☆146Updated 8 years ago
- Vendor-Neutral Security Tool Automation Controller (over REST)☆28Updated 6 years ago
- PoC for CVE-2018-1002105.☆222Updated 6 years ago
- Web Input Vector Extractor Teaser☆132Updated 3 years ago
- A BurpSuite plugin to detect Same Origin Method Execution vulnerabilities☆60Updated 8 years ago
- A tool for detecting XML External Entity (XXE) vulnerabilities in Java applications☆72Updated 11 years ago
- ☆71Updated 8 years ago
- An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions☆124Updated 7 years ago
- Writeup of CVE-2017-1002101 with sample "exploit"/escape☆35Updated 7 years ago
- A proof of concept that demonstrates asynchronous scanning for Java deserialization bugs☆55Updated 8 years ago
- A collection of various scripts and automations to simplify Checkmarx SAST and IAST setup and use☆14Updated 7 years ago
- Spring messaging STOMP protocol RCE☆113Updated 7 years ago
- ArmourBird CSF - Container Security Framework☆44Updated 3 years ago
- Tools for conducting analysis of CVE data in Elasticsearch☆73Updated 4 months ago
- Chef Cookbook which provisions apache+mod_security+owasp-crs☆37Updated 7 years ago
- Burp Suite plugin created for using Collaborator tool during manual testing in a comfortable way!☆104Updated 7 years ago
- Tests for different parsers from Ruby, Python, .NET, PHP, Perl, Java☆55Updated 9 years ago
- Snort rules☆35Updated 7 years ago
- A Java serializer in JavaScript☆81Updated 7 years ago
- ☆46Updated 9 years ago
- WAF Research☆183Updated 3 years ago
- DEF CON 26 Workshop - Attacking & Auditing Docker Containers Using Open Source☆108Updated 6 years ago
- Tool for checking Whether a domain or its multiple sub-domains are up and running.☆72Updated 6 years ago
- OWASP ASVS Assessment Tool☆28Updated 7 years ago
- Black Hat EU 2018 - Don't Eat Spaghetti with a Spoon - An Analysis of the Practical Value of Threat Intelligence☆22Updated 6 years ago
- JWT Fuzzer for BurpSuite. Adds an Intruder hook for on-the-fly JWT fuzzing.☆100Updated 6 years ago
- A Java Web Application with common legacy security flaws for tests with Arachni Scanner and ModSecurity☆21Updated last year