OWASP / cwe-tool
A command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration.
☆55Updated 2 months ago
Related projects ⓘ
Alternatives and complementary repositories for cwe-tool
- A Common Weakness Enumeration (CWE) Node.js SDK compliant with MITRE / CAPEC☆33Updated 3 weeks ago
- A community collection of security reviews of open source software components.☆92Updated 8 months ago
- A MAL language that demonstrates the Maven project structure☆23Updated 2 years ago
- Orchestron is an Application Vulnerability Management and Correlation Tool.Orchestron helps you solve one key problem "Find and fix vulne…☆31Updated last year
- A Burp plugin to export findings to DefectDojo☆30Updated last year
- ☆80Updated this week
- OWASP Foundation Web Respository☆27Updated 3 months ago
- A dataset of software supply chain compromises. Please help us maintain it!☆126Updated 2 years ago
- GitHub action to run Threagile, the agile threat modeling toolkit, on a repo's threagile.yaml file☆13Updated 6 months ago
- Python API library for DefectDojo☆40Updated last year
- A command line tool for detecting vulnerabilities in Python dependencies and doing safe package installs☆52Updated last year
- ZAP Management Scripts☆21Updated 2 weeks ago
- The OpenSSF CVE Benchmark consists of code and metadata for over 200 real life CVEs, as well as tooling to analyze the vulnerable codebas…☆141Updated 8 months ago
- The Open Security Summit is focused on the collaboration between, Developers and Application Security☆45Updated 2 weeks ago
- DefectDojo Community Content☆17Updated last month
- OWASP Threat Dragon with Gitlab Integration☆24Updated 7 years ago
- ☆25Updated 7 months ago
- CI Pipeline with Pixi, the WAF OWASP Core Rule Set and TestCafe tests.☆15Updated 3 years ago
- VINCE is the Vulnerability Information and Coordination Environment developed and used by the CERT Coordination Center to improve coordin…☆59Updated 3 weeks ago
- Mitigate security concerns of Dependency Confusion supply chain security risks☆40Updated 2 years ago
- Maturity Model Collaborative project☆13Updated last year
- OWASP Kubernetes Security Testing Guide☆37Updated 2 months ago
- Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.0, purl, and vers…☆98Updated this week
- This Repository contains the stable beta preview of the next major secureCodeBox (SCB) release v2.0.0.☆24Updated 4 years ago
- ☆36Updated 3 years ago
- Documentation of Semgrep: a fast, open-source, static analysis tool.☆37Updated this week
- Paper, data and code from Investigating Potential Security Vulnerability Manifestation through Various Analyses & Inferences Regarding In…☆18Updated 3 years ago
- Vulnogram is a tool for creating and editing CVE information in CVE JSON format☆161Updated 3 weeks ago
- VulDB Python scripts to fetch data via API☆20Updated 4 years ago
- Mininode is a CLI tool to reduce the attack surface of the Node.js applications by using static analysis.☆22Updated last year