Alternatives and similar repositories for www-project-benchmark

Users that are interested in www-project-benchmark are comparing it to the libraries listed below

• ossf-cve-benchmark / ossf-cve-benchmark
  The OpenSSF CVE Benchmark consists of code and metadata for over 200 real life CVEs, as well as tooling to analyze the vulnerable codebas…
  ☆145Updated last year
• microsoft / sarif-vscode-extension
  SARIF Microsoft Visual Studio Code extension
  ☆117Updated 2 weeks ago
• SAP / risk-explorer-for-software-supply-chains
  A taxonomy of attacks on software supply chains in the form of an attack tree, based on and linked to numerous real-world incidents and o…
  ☆75Updated last month
• RedHatProductSecurity / cvss
  CVSS2/3/4 library with interactive calculator for Python 2 and Python 3
  ☆100Updated 3 weeks ago
• google / oss-fuzz-vulns
  OSS-Fuzz vulnerabilities for OSV.
  ☆156Updated this week
• microsoft / codeql-container
  Prepackaged and precompiled github codeql container for rapid analysis, deployment and development.
  ☆119Updated last year
• too4words / securibench-micro
  Securibench Micro is a benchmark for static analysis tools for security.
  ☆26Updated 6 years ago
• olbat / nvdcve
  NVD/CVE as JSON files
  ☆119Updated this week
• SAP / project-kb
  Home page of project "KB"
  ☆126Updated 2 months ago
• AppThreat / vulnerability-db
  Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.1, purl, and vers…
  ☆120Updated last week
• pbom-dev / OSCAR
  A comprehensive, systematic and actionable way to understand attacker behaviors and techniques with respect to the software supply chain
  ☆96Updated 4 months ago
• cve-search / CVE-Search-Docker
  Docker Image for CVE-Search
  ☆110Updated 4 months ago
• joshbressers / cve-analysis
  Tools for conducting analysis of CVE data in Elasticsearch
  ☆74Updated last month
• iriusrisk / startleft
  StartLeft is an automation tool for generating Threat Models written in the Open Threat Model (OTM) format from a variety of different so…
  ☆50Updated 2 weeks ago
• felixgr / pytaint
  ☆34Updated 11 years ago
• GitHubSecurityLab / gh-mrva
  Run CodeQL queries at scale using Multi-Repository Variant Analysis (MRVA)
  ☆59Updated 2 months ago
• siemens / fluffi
  FLUFFI (Fully Localized Utility For Fuzzing Instantaneously) - A distributed evolutionary binary fuzzer for pentesters
  ☆101Updated 2 years ago
• facebook / sapp
  Post Processor for Facebook Static Analysis Tools.
  ☆141Updated last week
• usnistgov / ai-bugfinder-testbed
  A static analyzer powered by AI
  ☆21Updated 10 months ago
• microsoft / sarif-python-om
  Python classes for the SARIF object model
  ☆43Updated last year
• illikainen / ossaudit
  Audit python packages for known vulnerabilities
  ☆32Updated 3 years ago
• plume-oss / plume
  Plume is a code representation benchmarking library with options to extract the AST from Java bytecode and store the result in various gr…
  ☆74Updated 8 months ago
• OWASP / cwe-tool
  A command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration.
  ☆57Updated 3 weeks ago
• MozillaSecurity / FuzzManager
  A fuzzing management tools collection
  ☆191Updated this week
• srcclr / efda
  Evaluation Framework for Dependency Analysis (EFDA)
  ☆43Updated 3 years ago
• OWASP / threat-modeling-playbook
  ☆34Updated 3 years ago
• trailofbits / codeql-queries
  CodeQL queries developed by Trail of Bits
  ☆99Updated 2 weeks ago
• Teebytes / TnT-Fuzzer
  OpenAPI 2.0 (Swagger) fuzzer written in python. Basically TnT for your API.
  ☆111Updated 2 years ago
• ossf / security-reviews
  A community collection of security reviews of open source software components.
  ☆95Updated last year
• IQTLabs / pypi-scan
  Scan pypi for typosquatting
  ☆36Updated 2 years ago