My personal collection of resources (mostly tools and training materials) for source code security audits.
☆106Aug 20, 2024Updated last year
Alternatives and similar repositories for security-code-review
Users that are interested in security-code-review are comparing it to the libraries listed below
Sorting:
- Regex patterns for manual application source code review☆33Dec 14, 2020Updated 5 years ago
- Megagrep helps beginning a code review by searching for keywords in the code using "grep". It does not search for vulnerabilities directl…☆15Aug 8, 2022Updated 3 years ago
- A starter secure code review checklist☆184Nov 26, 2018Updated 7 years ago
- ☆196Feb 26, 2023Updated 3 years ago
- Automatic tool using for crawling code to find low-hang fruit vulnerabilities - Based on OWASP Secure Code Review Guide☆21Aug 31, 2020Updated 5 years ago
- Learning source code review, spot vulnerability, find some ways how to fix it.☆30Nov 17, 2022Updated 3 years ago
- A list of threat sinks used in the manual security source code review for application security☆76May 9, 2023Updated 2 years ago
- Report and finding templates used by the Serpico reporting tool☆16Sep 26, 2018Updated 7 years ago
- Training and certifications related to secure software development☆11Feb 9, 2026Updated 2 weeks ago
- HP Data Protector Arbitrary Remote Command Execution☆11Aug 12, 2018Updated 7 years ago
- Find unicode codepoints to use in normalisation and transformation attacks.☆11Mar 15, 2021Updated 4 years ago
- A Productivity-Boosting Burp Suite extension written in Kotlin that enables persistent sticky session handling in web application testing…☆12Oct 8, 2025Updated 4 months ago
- Query various sources for CVE proof-of-concepts☆53Jun 1, 2023Updated 2 years ago
- ☆12Jun 5, 2024Updated last year
- A handy plugin for copying requests/responses directly from Burp, some extra magic included.☆13Oct 15, 2021Updated 4 years ago
- generates unique subdomain names and runs httpx on them☆17Apr 8, 2024Updated last year
- History of commits related to the xz backdoor Discovered On March 29, 2024: CVE-2024-3094.☆10Apr 1, 2024Updated last year
- Programmatically start WebClient from an unprivileged session to enable that juicy privesc.☆78Feb 8, 2023Updated 3 years ago
- An OSWE Guide☆124Feb 18, 2021Updated 5 years ago
- Real Cyber Security Interview Questions for Various Job Roles☆60May 21, 2022Updated 3 years ago
- A set of Gitlab pipelines and Github workflows to automate and ease on BugBounty and Penetration Testing engagements☆28Dec 18, 2022Updated 3 years ago
- ☆50Feb 14, 2026Updated 2 weeks ago
- A script that greps composite key-like strings from a KeePassXC process dump, then uses a customized version of pykeepass library to unlo…☆33Nov 12, 2022Updated 3 years ago
- Wounty is a simple web enumeration script that makes use of other popular tools to automate the early stages of recognition in Bug Bounty…☆14Feb 6, 2022Updated 4 years ago
- This tools used for Automating finding of subdomain, and checking for alive subdomain, and gathering js files from all the subdomain and …☆22Jun 28, 2024Updated last year
- A training course on Web Security, Exploit Development and Source Code Auditing from 2009.☆12Feb 15, 2022Updated 4 years ago
- A stealthy, fast and easy tool to spray Active Directory credentials and bypass AD credential spraying controls.☆13Oct 13, 2022Updated 3 years ago
- Training for SQL injections☆36Feb 3, 2019Updated 7 years ago
- A collection of js analysis tools & scripts.☆19Updated this week
- Collections of code obfuscation libaries for different languages ( in progress )☆15Mar 18, 2023Updated 2 years ago
- Introducing the Ransomware Builder – an educational tool with a sleek, modern GUI that makes it easy for anyone to create their own ranso…☆18Aug 4, 2024Updated last year
- OWASP Code Review Guide Web Repository☆148Jun 22, 2022Updated 3 years ago
- AssetViz simplifies the visualization of subdomains from input files, presenting them as a coherent mind map. Ideal for penetration test…☆37Feb 15, 2026Updated 2 weeks ago
- External Playbooks for Public Access☆41Jan 31, 2025Updated last year
- Yet another collection of Frida scripts.☆21Mar 6, 2022Updated 3 years ago
- ☆15Apr 5, 2023Updated 2 years ago
- Create subdomains and files wordlists from your browser history☆13Jan 10, 2023Updated 3 years ago
- Extract GraphQL operations from javascript☆23Nov 27, 2025Updated 3 months ago
- Whitebox source code review cheatsheet (Based on AWAE syllabus)☆170Feb 16, 2022Updated 4 years ago