Alternatives and similar repositories for CodeSheriff.NET

Users that are interested in CodeSheriff.NET are comparing it to the libraries listed below

• nodyhub / zipslipper
  Create tar/zip archives that try to exploit zipslip vulnerability.
  ☆48Updated last year
• s0rcy / semgrep-rules
  Collection of Semgrep rules for security analysis
  ☆10Updated last year
• trufflesecurity / WhoAmISlack
  Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.
  ☆42Updated 2 years ago
• iosifache / semgrep-rules-manager
  Manager of 14 third-party sources comprising approximately 4,000 Semgrep rules 🗂
  ☆97Updated last month
• synacktiv / DepFuzzer
  ☆94Updated last month
• SonarSource / argument-injection-vectors
  A curated list of argument injection vectors
  ☆41Updated last year
• Neuroengine-vulns / autokaker
  Automated vulnerability discovery and annotation
  ☆68Updated last year
• doyensec / oidc-ssrf
  An Evil OIDC Server
  ☆54Updated 3 years ago
• messypoutine / gravy-overflow
  A GitHub Actions Supply Chain CTF / Goat
  ☆27Updated last month
• nccgroup / cq
  ☆116Updated 2 years ago
• bcdannyboy / DGWR
  Dont Gamble with Risk
  ☆14Updated last year
• chensokolovsky / iosEnv
  docker env for ios research on a mac host
  ☆26Updated 7 months ago
• synacktiv / gh-hijack-runner
  A python script to create a fake GitHub runner and hijack pipeline jobs to leak CI/CD secrets.
  ☆27Updated last year
• AdnaneKhan / ActionsCacheBlasting
  Proof-of-concept code for research into GitHub Actions Cache poisoning.
  ☆21Updated 10 months ago
• ortegaalfredo / autok-extension
  AI-powered bug hunter - vscode plugin.
  ☆37Updated last year
• chris-anley / cq
  CQ, a code security scanner
  ☆99Updated last year
• AnubisSec / GroovyWaiter
  ☆17Updated 3 years ago
• hac01 / gcp-iam-brute
  ☆51Updated last year
• tstromberg / supplychain-attack-data
  Data about all known supply-chain attacks through history
  ☆63Updated 8 months ago
• stephenbradshaw / aws_url_signer
  POC tool to create signed AWS API GET requests to bypass Guard Duty alerting of off-instance credential use via SSRF
  ☆59Updated 2 years ago
• RichardoC / gitlab-secrets
  This tool analyzes a given Gitlab repository and searches for dangling or force-pushed commits containing potential secret or interesting…
  ☆47Updated last year
• 5stars217 / malicious_models
  using ML models for red teaming
  ☆45Updated 2 years ago
• trustedsec / VerifyELF
  ☆26Updated last year
• JosephTLucas / vger
  An interactive CLI application for interacting with authenticated Jupyter instances.
  ☆55Updated 9 months ago
• doyensec / cloudsec-tidbits
  Blogpost series showcasing interesting cloud - web app security bugs
  ☆49Updated 2 years ago
• nccgroup / cowcloud
  ☆60Updated 2 years ago
• bcdannyboy / EnterpriseSASTDASTProductLandscape
  Analysis of the Enterprise SAST/DAST product landscape
  ☆38Updated last year
• Outpost24 / outpost24-cors-check
  Additional active scan checks for BURP
  ☆28Updated last year
• ProZachJ / ducktales
  Python's handling of NaN is....interesting?broken?...this project illustrates the issue
  ☆13Updated 4 years ago
• FuzzySecurity / afl-frida-build
  Ansible build for Afl++ Frida-Mode
  ☆25Updated last year