SecureStackCo / actions-codeLinks
A GitHub Action for using SecureStack to analyse a repository codebase for vulnerabilities in library dependencies (software composition analysis).
☆22Updated 3 years ago
Alternatives and similar repositories for actions-code
Users that are interested in actions-code are comparing it to the libraries listed below
Sorting:
- An extension to use Semgrep inside Burp Suite.☆89Updated 3 months ago
- A GitHub Action that scans your public web applications for log4j vulnerabilities after every deployment. Add this to your dev, staging a…☆15Updated 3 years ago
- SecureStack Application Bill of Materials (ABOM/SBOM)☆13Updated 3 years ago
- Dependency Confusion Security Testing Tool☆49Updated 3 years ago
- Adding this GitHub Action will scan your repository for sensitive data in your source code. We find things like passwords, server host s…☆31Updated 2 years ago
- Prototype of Full Agentic Application Security Testing, FAAST = SAST + DAST + LLM agents☆63Updated 4 months ago
- Manager of third-party sources of Semgrep rules 🗂☆87Updated last year
- ☆30Updated last year
- Encode and Fuzz Custom Protobuf Messages in Burp Suite☆33Updated 5 months ago
- Community generated list of API security tests to find OWASP top10, HackerOne top 10 vulnerabilities☆38Updated last week
- A collection of my Semgrep rules☆49Updated 2 years ago
- ☆90Updated 3 years ago
- Trickest Workflow for discovering log4j vulnerabilities and gathering the newest community payloads.☆113Updated 3 years ago
- Let's check if your target is vulnerable for client side prototype pollution.☆65Updated last year
- yataf extracts secrets and paths from files or urls - its best used against javascript files☆53Updated 11 months ago
- A tool which allows HackerOne researchers to download their reports into a local, indexed, and searchable repository☆19Updated 2 years ago
- Performing automated scan using Burp Suite Pro & Vmware Burp Rest API☆50Updated 2 years ago
- A list of threat sinks used in the manual security source code review for application security☆72Updated 2 years ago
- Perform TE.CL HTTP Request Smuggling attacks by crafting HTTP Request automatically.☆72Updated 3 years ago
- Make exploiting race conditions in web applications highly efficient and ease-of-use.☆24Updated 2 months ago
- A collection of Semgrep rules which followed security guidelines for .NET and Java.☆23Updated 3 years ago
- ☆64Updated 3 years ago
- PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagrams☆105Updated 7 months ago
- InfoSec OpenAI Examples☆19Updated last year
- Semgrep rules corresponding to the OWASP ASVS standard☆27Updated 4 years ago
- Dependency Combobulator☆93Updated last year
- ☆20Updated 5 years ago
- Paramalyzer - Burp extension for parameter analysis of large-scale web application penetration tests.☆33Updated 2 years ago
- This script just implement a proxy over h2cSmuggler so you can navigate in your browser making requests to the back-end server.☆37Updated 3 years ago
- A Burp Suite Extension for parsing Project Files from the CLI.☆87Updated 11 months ago