cxai / Checkmarx-PowerTools
A collection of various scripts and automations to simplify Checkmarx SAST and IAST setup and use
☆14Updated 6 years ago
Alternatives and similar repositories for Checkmarx-PowerTools:
Users that are interested in Checkmarx-PowerTools are comparing it to the libraries listed below
- Jekyll Files for cloudsecwiki.com☆50Updated 3 years ago
- An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions☆122Updated 7 years ago
- Burp Suite extension to passively scan for applications revealing server error messages☆66Updated last year
- Vulnerable Java based Web Application☆31Updated 5 years ago
- Automated SonarQube☆73Updated 5 years ago
- ☆42Updated 4 years ago
- DEF CON 26 Workshop - Attacking & Auditing Docker Containers Using Open Source☆107Updated 5 years ago
- Automate security tests using Burp Suite.☆225Updated 9 months ago
- A Burp extension to show the Collaborator client in a tab☆36Updated 2 years ago
- WARNING: This is a vulnerable application to test the exploit for the Spring Break vulnerability (CVE-2017-8046). Run it at your own risk…☆12Updated 6 years ago
- Custom Fortify SCA rules to detect common JSSE certification validation flaws☆11Updated 9 years ago
- DupeKeyInjector☆135Updated 2 years ago
- A Burp plugin to export findings to DefectDojo☆30Updated last year
- General Open Architecture Security Questionnaire☆31Updated last year
- ☆76Updated 11 years ago
- Burp extension to passively scan for applications revealing software version numbers☆30Updated 10 months ago
- Another plugin for CRLF vulnerability detection☆26Updated 8 years ago
- Burp Suite extension for JAX-RS☆65Updated 8 years ago
- YSOSERIAL Integration with burp suite☆40Updated 3 years ago
- Extension providing view with filtering capabilities for both complete and incomplete requests from all burp tools.☆48Updated 4 years ago
- Proof-of-concept CORS exploitation tool.☆35Updated 5 years ago
- siberas JMX exploitation toolkit☆129Updated 2 years ago
- Provides a suite of Burp extensions and a maven plugin to automate security tests using BurpSuite.☆25Updated 6 years ago
- Scans tcl for command injection☆36Updated 5 years ago
- Serverless Workshop☆16Updated 2 years ago
- Executes commands in a container on a kubelet endpoint that allows anonymous authentication (default)☆112Updated 6 years ago
- A BurpSuite plugin to detect Same Origin Method Execution vulnerabilities☆60Updated 7 years ago
- A static analysis API for finding deserialization attack gadgets☆38Updated 2 years ago
- Sample Spring Boot App Demonstrating RCE via Exposed env Actuator and H2 Database☆105Updated 5 years ago
- Burp extension to help developers replicate findings from pen tests☆70Updated 8 months ago