SecureStackCo / actions-codeLinks
A GitHub Action for using SecureStack to analyse a repository codebase for vulnerabilities in library dependencies (software composition analysis).
☆22Updated 3 years ago
Alternatives and similar repositories for actions-code
Users that are interested in actions-code are comparing it to the libraries listed below
Sorting:
- An extension to use Semgrep inside Burp Suite.☆89Updated 8 months ago
- SecureStack Application Bill of Materials (ABOM/SBOM)☆13Updated 3 years ago
- Dependency Confusion Security Testing Tool☆51Updated 3 years ago
- Encode and Fuzz Custom Protobuf Messages in Burp Suite☆36Updated 10 months ago
- A collection of Semgrep rules which followed security guidelines for .NET and Java.☆23Updated 4 years ago
- Prototype of Full Agentic Application Security Testing, FAAST = SAST + DAST + LLM agents☆67Updated 9 months ago
- OWASP ASVS Security Evaluation Templates with Nuclei☆42Updated last month
- Security Advisories☆35Updated 2 months ago
- Manager of 14 third-party sources comprising approximately 4,000 Semgrep rules 🗂☆97Updated last month
- Paramalyzer - Burp extension for parameter analysis of large-scale web application penetration tests.☆34Updated 3 years ago
- gRPC / gRPC-Web Pentest Practicing Lab☆10Updated 2 years ago
- A collection of my Semgrep rules☆51Updated 2 years ago
- ☆95Updated 4 years ago
- Recurrent Neural Network SubDomain Discovery Tool☆95Updated 3 years ago
- Detects request smuggling via HTTP/2 downgrades.☆94Updated 3 years ago
- PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagrams☆106Updated last year
- Additional active scan checks for BURP☆28Updated last year
- Make exploiting race conditions in web applications highly efficient and ease-of-use.☆27Updated 7 months ago
- ☆23Updated 5 years ago
- My talks...☆25Updated 11 months ago
- Let's check if your target is vulnerable for client side prototype pollution.☆65Updated 2 years ago
- Prototype Pollution exploits collection☆37Updated 4 years ago
- yataf extracts secrets and paths from files or urls - its best used against javascript files☆52Updated last year
- A collection of utilities for building extensions using Burp's Montoya API☆52Updated 2 months ago
- A GraphQL enumeration and extraction tool☆134Updated 3 years ago
- This script just implement a proxy over h2cSmuggler so you can navigate in your browser making requests to the back-end server.☆36Updated 3 years ago
- ☆44Updated 5 years ago
- Perform TE.CL HTTP Request Smuggling attacks by crafting HTTP Request automatically.☆73Updated 3 years ago
- Proof-of-concept code for research into GitHub Actions Cache poisoning.☆21Updated 10 months ago
- ☆56Updated 4 years ago