A static-code-analysis tool for performing security-focused code reviews. It enables an auditor to swiftly map the attack-surface of a large application, with an emphasis on identifying development anti-patterns and footguns.
☆143Jul 9, 2024Updated 2 years ago
Alternatives and similar repositories for drek
Users that are interested in drek are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Example signature files for drek.☆12Jan 10, 2018Updated 8 years ago
- Watchtower is a Static Code Analysis tool designed to assist security auditors who are tasked with performing manual code reviews. It is …☆110Jun 27, 2017Updated 9 years ago
- Monitor arbitrary TCP traffic using your HTTP interception proxy of choice☆46Sep 13, 2017Updated 8 years ago
- Fuzzing tool written in Golang. Insane monkey not included.☆11Feb 22, 2018Updated 8 years ago
- MalRecon - Basic Malware Reconnaissance and Analysis Tool☆26Jun 8, 2017Updated 9 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A WebDAV PROPFIND covert channel to deliver payloads☆52Nov 14, 2017Updated 8 years ago
- Lazy Bloodhound is a toy PHP static code analyzer built on tree-sitter☆13Feb 19, 2021Updated 5 years ago
- Automatic tool using for crawling code to find low-hang fruit vulnerabilities - Based on OWASP Secure Code Review Guide☆21Aug 31, 2020Updated 5 years ago
- ☆17Apr 28, 2026Updated 3 months ago
- Regex patterns for manual application source code review☆34Dec 14, 2020Updated 5 years ago
- ☆11Apr 28, 2017Updated 9 years ago
- Durvasav is a bruteforce password cracker (BfPC) written in C.☆10Sep 28, 2018Updated 7 years ago
- Burp Suite plugin created for using Collaborator tool during manual testing in a comfortable way!☆102Jun 1, 2018Updated 8 years ago
- Vulnerability Assessment and Penetration Testing Toolkit☆18Jan 5, 2022Updated 4 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- POC for IAT Parsing Payloads☆48Jan 1, 2017Updated 9 years ago
- A webshell framework for penetration testers.☆299Aug 10, 2025Updated last year
- Various Scripts for Mobile Pen-testing with Frida☆74Jun 14, 2016Updated 10 years ago
- Get detailed information about a Twitter user activity☆17Dec 14, 2017Updated 8 years ago
- Source Code Intelligence☆29Aug 21, 2017Updated 8 years ago
- Scripts and auxiliary files for fuzzing PHP's unserialize function☆45Aug 13, 2017Updated 9 years ago
- Reverse or bind shell catcher which uprgrades the caught shell to be more like a regular shell☆26Mar 17, 2019Updated 7 years ago
- A platform to run private unannounced Honeypots as Tor Hidden Services (aka Onion Decoys) inside the Tor Network.☆25Aug 14, 2017Updated 9 years ago
- A shellcode testing harness.☆69Jul 10, 2024Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- GoFetch is a tool to automatically exercise an attack plan generated by the BloodHound application.☆633Jun 20, 2017Updated 9 years ago
- This is a Burp extension for adding additional payloads to active scanner that require out-of-band validation. Works great with XSSHunter☆20Feb 16, 2017Updated 9 years ago
- ☆30May 23, 2017Updated 9 years ago
- Customizable lazy exploit pattern utility.☆13Oct 2, 2022Updated 3 years ago
- Node JS code for a set of Alexa voice skills designed to assist hackers and developers with common tasks☆56Mar 6, 2019Updated 7 years ago
- Advanced Vulnerable Web Application (AVWA)☆14Jun 10, 2017Updated 9 years ago
- Megagrep helps beginning a code review by searching for keywords in the code using "grep". It does not search for vulnerabilities directl…☆14Aug 8, 2022Updated 4 years ago
- ANWI - All New Wireless IDS☆28Nov 28, 2025Updated 8 months ago
- Puny Domain Name Check☆38Jul 29, 2019Updated 7 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Highlight Burp proxy requests made by different browsers☆29Sep 21, 2017Updated 8 years ago
- Nail in the JKS coffin - Cracking passwords of private key entries in a JKS file☆188Sep 21, 2020Updated 5 years ago
- A tool that can help detect and takeover subdomains with dead DNS records☆12Aug 23, 2018Updated 7 years ago
- Dynamic android vulnerability scanner using OpenNebula and Android-x86 emulators.☆42Feb 24, 2017Updated 9 years ago
- application server attack toolkit☆687Apr 6, 2020Updated 6 years ago
- Automatic firewall rule orchestator.☆81Sep 28, 2017Updated 8 years ago
- Store Burp data and collaborate via git☆54Oct 31, 2019Updated 6 years ago