A static-code-analysis tool for performing security-focused code reviews. It enables an auditor to swiftly map the attack-surface of a large application, with an emphasis on identifying development anti-patterns and footguns.
☆141Jul 9, 2024Updated 2 years ago
Alternatives and similar repositories for drek
Users that are interested in drek are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Example signature files for drek.☆12Jan 10, 2018Updated 8 years ago
- Watchtower is a Static Code Analysis tool designed to assist security auditors who are tasked with performing manual code reviews. It is …☆110Jun 27, 2017Updated 9 years ago
- Fuzzing tool written in Golang. Insane monkey not included.☆11Feb 22, 2018Updated 8 years ago
- Monitor arbitrary TCP traffic using your HTTP interception proxy of choice☆46Sep 13, 2017Updated 9 years ago
- MalRecon - Basic Malware Reconnaissance and Analysis Tool☆26Jun 8, 2017Updated 9 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Automatic tool using for crawling code to find low-hang fruit vulnerabilities - Based on OWASP Secure Code Review Guide☆21Aug 31, 2020Updated 6 years ago
- ISR-sqlget It's a blind SQL injection tool developed in Perl.☆14Apr 26, 2013Updated 13 years ago
- ☆11Apr 28, 2017Updated 9 years ago
- Burp Suite plugin created for using Collaborator tool during manual testing in a comfortable way!☆102Jun 1, 2018Updated 8 years ago
- ☆17Apr 28, 2026Updated 6 months ago
- Vulnerability Assessment and Penetration Testing Toolkit☆18Jan 5, 2022Updated 4 years ago
- Regex patterns for manual application source code review☆35Dec 14, 2020Updated 5 years ago
- A graphical security analysis tool for IoT networks☆199Apr 17, 2019Updated 7 years ago
- A WebDAV PROPFIND covert channel to deliver payloads☆52Nov 14, 2017Updated 8 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆13Feb 25, 2013Updated 13 years ago
- Source Code Intelligence (discontinued, no longer maintained)☆29Updated this week
- A webshell framework for penetration testers.☆298Aug 10, 2025Updated last year
- This is a Burp extension for adding additional payloads to active scanner that require out-of-band validation. Works great with XSSHunter☆20Feb 16, 2017Updated 9 years ago
- Customizable lazy exploit pattern utility.☆13Oct 2, 2022Updated 4 years ago
- Query and report user logons relations from MS Windows Security Events☆243Aug 9, 2018Updated 8 years ago
- Scripts and auxiliary files for fuzzing PHP's unserialize function☆46Aug 13, 2017Updated 9 years ago
- GoFetch is a tool to automatically exercise an attack plan generated by the BloodHound application.☆632Jun 20, 2017Updated 9 years ago
- Advanced Vulnerable Web Application (AVWA)☆14Jun 10, 2017Updated 9 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- A security scanner for Wordpress blogging engine☆32May 11, 2016Updated 10 years ago
- Highlight Burp proxy requests made by different browsers☆29Sep 21, 2017Updated 9 years ago
- Web Filter External Enumeration Tool (WebFEET)☆78Aug 24, 2014Updated 12 years ago
- Puny Domain Name Check☆38Jul 29, 2019Updated 7 years ago
- Megagrep helps beginning a code review by searching for keywords in the code using "grep". It does not search for vulnerabilities directl…☆14Aug 21, 2026Updated 2 months ago
- Store Burp data and collaborate via git☆54Oct 31, 2019Updated 7 years ago
- Uncategorized utilities☆55Jan 5, 2019Updated 7 years ago
- A collection of IDA Python scripts, useful for reverse engineering☆13Sep 4, 2012Updated 14 years ago
- Materials for 44con 2014 CANAPE Workshop☆23Sep 11, 2014Updated 12 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A platform to run private unannounced Honeypots as Tor Hidden Services (aka Onion Decoys) inside the Tor Network.☆24Aug 14, 2017Updated 9 years ago
- Various Scripts for Mobile Pen-testing with Frida☆75Jun 14, 2016Updated 10 years ago
- A repository for things not quite big enough to warrant their own repository.☆13Jan 12, 2026Updated 9 months ago
- A Django application full of security holes for instructional purposes☆14Feb 25, 2013Updated 13 years ago
- Based on URL and Organization Name, collect the IP Ranges, subdomains using various tools like Amass, subfinder, etc.. And check for upho…☆158May 1, 2024Updated 2 years ago
- Node JS code for a set of Alexa voice skills designed to assist hackers and developers with common tasks☆57Mar 6, 2019Updated 7 years ago
- Linux vulnerability scanner based on Salt Open and Vulners audit API, with Slack notifications and JIRA integration☆260Oct 18, 2017Updated 9 years ago