The OWASP Benchmark for Python is a test suite designed to verify the accuracy of Python software vulnerability detection tools. A fully runnable web app written in Python, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Python. For more details, see the OWASP Benchmark Project home page.
☆35May 19, 2026Updated 4 months ago
Alternatives and similar repositories for BenchmarkPython
Users that are interested in BenchmarkPython are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆18Sep 24, 2025Updated last year
- Auth Mutator is a Burp Suite extension that helps you experiment with mutated authentication requests while keeping the original traffic …☆16Oct 7, 2026Updated last week
- operative framework is a OSINT investigation framework, you can interact with multiple targets, execute multiple modules, create links wi…☆13Oct 23, 2019Updated 6 years ago
- Data for LLM4Vuln☆14Jan 28, 2024Updated 2 years ago
- Complete CNAPP Demo using Prisma Cloud☆17Mar 26, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Vul4J: A Dataset of Reproducible Java Vulnerabilities☆144Jul 8, 2026Updated 3 months ago
- The CASTLE Benchmark is a modern micro-benchmarking solution to test Static Analyzers and LLMs in vulnerability detection☆30Jul 20, 2026Updated 2 months ago
- OMCBench is a benchmark suite for evaluating malicious-code detection capabilities. The benchmark consists of a labeled set of 800 Python…☆18Jun 9, 2026Updated 4 months ago
- Generate CPG for multiple languages for code and threat analysis☆12Sep 22, 2023Updated 3 years ago
- 修复停止维护的Vxhunter IDA插件项目在python3高些的版本下运行的若干问题☆15Aug 26, 2024Updated 2 years ago
- Generate VEX (Vulnerability Exploitability Exchange) CycloneDX documents☆25Jan 19, 2025Updated last year
- ☆15Mar 22, 2021Updated 5 years ago
- Repository of SBOMs generated by the syft SBOM generator tool, against a list of popular dockerhub container images.☆22Mar 3, 2026Updated 7 months ago
- This repo contains the codes of the penetration test benchmark for Generative Agents presented in the paper "AutoPenBench: Benchmarking G…☆103Oct 28, 2025Updated 11 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Identify common attack paths to get Domain Administrator☆21Aug 20, 2019Updated 7 years ago
- URL-encode data streams via commandline☆14Oct 26, 2019Updated 6 years ago
- A neurosymbolic framework for vulnerability detection in code☆441Jul 2, 2026Updated 3 months ago
- Jess is short for Joern extended by Semantic Slicing. This tool allows you to import C code into a Code Property Graph, and then compute …☆17May 22, 2024Updated 2 years ago
- Autogrep automates Semgrep rule generation and filtering by using LLMs to analyze vulnerability patches, enabling automatic creation of h…☆89Feb 27, 2025Updated last year
- experimental wildcard subdomain filtering prototype☆14Aug 5, 2023Updated 3 years ago
- ☆18Nov 12, 2025Updated 11 months ago
- A collection of awesome web crawler,spider in different languages☆13Oct 6, 2017Updated 9 years ago
- 🛡 The reference playbook for pentesting AI chatbots & LLM-powered apps in one place. Ready-to-use payloads covering the full OWASP LLM T…☆36Jun 18, 2026Updated 3 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- CVE-2021-40438 exploit PoC with Docker setup.☆14Oct 24, 2021Updated 4 years ago
- HashiCorp-relevant rules for the Semgrep code analysis tool☆42Oct 3, 2023Updated 3 years ago
- A very vulnerable implementation of a GraphQL API.☆18Mar 27, 2026Updated 6 months ago
- AU335:计算机视觉 课程大作业。Back to the Non-deep-learning Era: 非深度学习的车牌检测与识别算法。基于特征提取、模板匹配等技术。☆13Nov 22, 2021Updated 4 years ago
- Semgrep rules corresponding to the OWASP ASVS standard☆27Nov 2, 2020Updated 5 years ago
- Intentionally Vulnerable Flask app for use in Demos☆34Feb 7, 2026Updated 8 months ago
- Ricerca che mostra come scrivere regole per SemGrep per cercare SQL Injection nei plugin di Wordpress che usano action AJAX☆19Jul 22, 2023Updated 3 years ago
- Predator is a directed fuzzing-based Web application vulnerability validation prototype. It automates verifying static vulnerability repo…☆14May 19, 2025Updated last year
- ☆12May 24, 2026Updated 4 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- ☆46Aug 20, 2026Updated last month
- ☆20Oct 5, 2020Updated 6 years ago
- LiveCTF challenges and infrastructure at DEFCON 32 CTF☆23Aug 14, 2026Updated 2 months ago
- The official repo for the paper Can ChatGPT replace StackOverflow? A Study on Robustness and Reliability of Large Language Model Code Gen…☆20Feb 27, 2024Updated 2 years ago
- An automated static taint analysis tool for the Lua web framework.☆23Sep 27, 2024Updated 2 years ago
- An autonomous LLM-agent for large-scale, repository-level code auditing☆444Mar 12, 2026Updated 7 months ago
- ☆18Mar 20, 2025Updated last year