A practical security workbook for reviewing source code, identifying vulnerabilities, validating findings with test cases, and automating secure code reviews.
☆32Sep 4, 2026Updated last month
Alternatives and similar repositories for Source-Code-Review-Workbook
Users that are interested in Source-Code-Review-Workbook are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- CVE lookup + Wappalyzer☆37Sep 26, 2026Updated 3 weeks ago
- The one shot API attacker tool - finds the API url from the given root simulate the automated attacks☆35Jul 21, 2026Updated 3 months ago
- ☆30Feb 13, 2026Updated 8 months ago
- Advanced test for proxy & waf☆13Feb 10, 2026Updated 8 months ago
- TokenTwin Checker — Dual Token BAC/IDOR Tester for Burp Suite☆98Aug 24, 2026Updated last month
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Some scripts to enumerate and attack Jenkins servers☆12Feb 1, 2024Updated 2 years ago
- Behavioral-discipline skill turning an AI agent into a methodical, non-robotic bug-bounty & pentest hunter - 42 always-on rules: scope, c…☆35Aug 18, 2026Updated 2 months ago
- ☆16Apr 24, 2024Updated 2 years ago
- find sources and sinks from js files☆17Apr 4, 2026Updated 6 months ago
- Live runtime audit for installed Android apps. Runs on the rooted phone, serves a browser dashboard.☆33May 23, 2026Updated 5 months ago
- RBCD Attack Path enumeration tool for attackers and defenders☆15Apr 25, 2026Updated 5 months ago
- ☆16Sep 4, 2025Updated last year
- ☆11Jan 12, 2023Updated 3 years ago
- My studies on Malware Development☆21Jul 6, 2026Updated 3 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆27Mar 30, 2026Updated 6 months ago
- An advanced Out-of-Band and In-Band SSRF fuzzing scanner with dynamic request tracking.☆40Jun 18, 2026Updated 4 months ago
- Automated DAST for Android Apps☆156Sep 16, 2026Updated last month
- ☆19Dec 11, 2025Updated 10 months ago
- ☆50Jul 7, 2026Updated 3 months ago
- CVE-2026-54121 - CertiGhost AD CS Multi-Exploit Framework | Rogue DC + LDAP spoofing, certificate abuse, PKINIT hash extraction, auto DCS…☆30Sep 29, 2026Updated 3 weeks ago
- cve-2026-48907 scanner☆64Jun 27, 2026Updated 3 months ago
- A Flipper Zero that stops guessing and starts reasoning: ML-guided RFID/NFC fuzzing & access-control auditing that turns raw card reads i…☆25Sep 19, 2026Updated last month
- Regex patterns for manual application source code review☆36Dec 14, 2020Updated 5 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- CLI for authorized iOS pentest lab setup, Frida/Objection readiness checks, and IPA installation.☆23Jul 28, 2026Updated 2 months ago
- Flutter SSL Pinning Bypass Tool for Android & iOS — works on any Flutter version without pattern databases☆317Sep 30, 2026Updated 3 weeks ago
- A two-domain Active Directory lab - lab.local + corp.local, 5 machines, 3 flags. Runs on VirtualBox. Spin it up and see how far you get.☆33Jul 26, 2026Updated 2 months ago
- Agentic C2-style MCP server for Frida instrumentation on rooted Android and jailbroken iOS.☆70Mar 18, 2026Updated 7 months ago
- ClickMyPayload creates realistic browser verification pages that silently copy PowerShell or CMD commands to the clipboard, display decoy…☆26Sep 25, 2026Updated 3 weeks ago
- Collection of programs I made while learning assembly.☆73Jul 26, 2026Updated 2 months ago
- Azure DevOps Server development system segmentation best practices☆13Sep 20, 2022Updated 4 years ago
- A fast and powerful CLI tool for finding secrets and other data in files, web pages, and other text sources. Supports multi-threading and…☆29Oct 11, 2026Updated last week
- Thick client penetration testing and MSIX security audit toolkit for Windows. Audits .NET, Electron and native binaries: static and runti…☆23Updated this week
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- My wallpapers. Not really my but whatever.☆11Oct 12, 2026Updated last week
- SerialTweaker can be used to load a serialized object, change its contents, and reserialize it to a new serialized object with modified f…☆13May 23, 2023Updated 3 years ago
- Demos for Black Hat Europe 2025's The Forensic Trail On GitHub: Hunting For Supply Chain Activity☆28Updated this week
- Patch script to run decrypted IOS-Apps with IOS simulator☆15Oct 3, 2024Updated 2 years ago
- Modern offline-first Application Security Intelligence Platform for Android, iOS, Flutter and React Native with attack-chain analysis, ex…☆184Jul 21, 2026Updated 3 months ago
- This is an advanced ASMI bypass that is currently undetected by Windows Defender and all the Antivirus software's on virustotal.☆28Jun 10, 2025Updated last year
- Forensic Linux VM for Apple Silicon, ARM64 and x86-64 compatible platforms☆16Jul 17, 2026Updated 3 months ago