akabe1 / akabe1-semgrep-rules
My collection of Semgrep rules for vulnerability detection on source code (swift, java)
☆32Updated 8 months ago
Related projects ⓘ
Alternatives and complementary repositories for akabe1-semgrep-rules
- ☆17Updated 2 years ago
- OAuth 2.0 Dynamic Security Scanner☆31Updated 3 years ago
- An Evil OIDC Server☆51Updated 2 years ago
- A collection of my Semgrep rules☆47Updated last year
- Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.☆39Updated 11 months ago
- Static Token And Credential Scanner☆95Updated last year
- Quick WAF "paranoid" Doctor Evaluation | WAFPARAN01D3 Tool☆25Updated 3 years ago
- ☆90Updated 2 years ago
- A Python-based tool to create zip, tar and cpio archives to exploit common archive library issues and developer mistakes☆42Updated last year
- Proof-of-concept code for research into GitHub Actions Cache poisoning.☆22Updated 3 months ago
- A python script to create a fake GitHub runner and hijack pipeline jobs to leak CI/CD secrets.☆18Updated last month
- ☆10Updated 5 years ago
- Encode and Fuzz Custom Protobuf Messages in Burp Suite☆30Updated last year
- Manager of third-party sources of Semgrep rules 🗂☆76Updated 4 months ago
- Create tar/zip archives that try to exploit zipslip vulnerability.☆45Updated 2 months ago
- ☆58Updated last year
- Additional active scan checks for BURP☆20Updated last month
- Custom scripts for the PIPER Burp extensions.☆97Updated last year
- Python's handling of NaN is....interesting?broken?...this project illustrates the issue☆13Updated 2 years ago
- Take domains on stdin and output them on stdout if they get resolved☆33Updated 2 years ago
- ☆40Updated last month
- A curated list of argument injection vectors☆37Updated 2 months ago
- ☆13Updated 4 months ago
- InfoSec OpenAI Examples☆19Updated 11 months ago
- A Burp Suite extension implementing the Signing HTTP Messages draft-ietf-httpbis-message-signatures-01 draft.☆39Updated 2 years ago
- Example repository for GitHub Actions Time of Check to Time of Use (TOCTOU vulnerabilities)☆22Updated 4 months ago
- An extension to use Semgrep inside Burp Suite.☆88Updated last year
- Dependency Confusion Security Testing Tool☆39Updated 2 years ago
- Reference architecture and proof of concept implementation for supply chain security gateway☆23Updated last year
- FastCVE - fast, rich and API-based search for CVE and more (CPE, CWE, CAPEC)☆39Updated 3 months ago