My personal collection of resources (mostly tools and training materials) for source code security audits.
☆111Aug 20, 2024Updated 2 years ago
Alternatives and similar repositories for security-code-review
Users that are interested in security-code-review are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Regex patterns for manual application source code review☆35Dec 14, 2020Updated 5 years ago
- ☆197Feb 26, 2023Updated 3 years ago
- A starter secure code review checklist☆184Nov 26, 2018Updated 7 years ago
- web app monitoring automation☆15Jan 7, 2025Updated last year
- Training and certifications related to secure software development☆10Aug 9, 2026Updated 2 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Automatic tool using for crawling code to find low-hang fruit vulnerabilities - Based on OWASP Secure Code Review Guide☆21Aug 31, 2020Updated 6 years ago
- Find unicode codepoints to use in normalisation and transformation attacks.☆11Mar 15, 2021Updated 5 years ago
- AssetViz simplifies the visualization of subdomains from input files, presenting them as a coherent mind map. Ideal for penetration test…☆38Feb 15, 2026Updated 7 months ago
- Collection of templates for linux☆10Jun 2, 2024Updated 2 years ago
- Extract GraphQL operations from javascript☆25Mar 18, 2026Updated 6 months ago
- SecureEye is an AI tool for secure code review. It assesses code for vulnerabilities, and common attack vectors☆14May 21, 2024Updated 2 years ago
- Set of scripts that will be useful for bug hunters☆17Apr 18, 2026Updated 5 months ago
- Collection of all the resources published by Payatu.☆11May 14, 2026Updated 4 months ago
- ☆13Feb 20, 2025Updated last year
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- My notes from courses,books ..etc☆49Nov 26, 2025Updated 10 months ago
- grep rough audit - source code auditing tool☆1,690Dec 19, 2025Updated 9 months ago
- Query various sources for CVE proof-of-concepts☆50Jun 1, 2023Updated 3 years ago
- A list of threat sinks used in the manual security source code review for application security☆76May 9, 2023Updated 3 years ago
- History of commits related to the xz backdoor Discovered On March 29, 2024: CVE-2024-3094.☆11Apr 1, 2024Updated 2 years ago
- A Burp Suite extension that detects, catalogs, and exports developer comments, secrets, and keywords embedded in both HTTP response bodie…☆19Sep 18, 2025Updated last year
- A collection of js analysis tools & scripts.☆19May 4, 2026Updated 5 months ago
- A Shodan-based tool to discover publicly exposed Ollama instances and list available LLM models.☆25May 27, 2025Updated last year
- OWASP ASVS Security Evaluation Templates with Nuclei☆44Dec 2, 2025Updated 10 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Find endpoints in archived versions of robots.txt☆14Nov 21, 2019Updated 6 years ago
- Proxy Management for Security Professionals☆26Mar 25, 2025Updated last year
- Report and finding templates used by the Serpico reporting tool☆16Sep 26, 2018Updated 8 years ago
- Real Cyber Security Interview Questions for Various Job Roles☆62May 21, 2022Updated 4 years ago
- A simple index for HackTheBox machine along with tags☆16Mar 26, 2026Updated 6 months ago
- Welcome to RFS notes to CRTP - Certified Red Team Professional by Altered Security.☆30Aug 20, 2024Updated 2 years ago
- CSPT is an open-source Burp Suite extension to find and exploit Client-Side Path Traversal.☆170Jul 2, 2024Updated 2 years ago
- generates unique subdomain names and runs httpx on them☆18Apr 8, 2024Updated 2 years ago
- HP Data Protector Arbitrary Remote Command Execution☆11Aug 12, 2018Updated 8 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A penetration test reporting tool☆10Mar 8, 2023Updated 3 years ago
- Whitebox source code review cheatsheet (Based on AWAE syllabus)☆174Feb 16, 2022Updated 4 years ago
- This repo contains the code for my secure code review challenges. People used this as the primary resource to pass FAANG AppSec interview…☆385Updated this week
- OWASP Code Review Guide Web Repository☆153Jun 22, 2022Updated 4 years ago
- regex Hunter- Fast website endpoint sensitive data and Leaks JS files endpoint API Key Scraper☆16Jun 8, 2024Updated 2 years ago
- Reports from various areas of information security☆277Apr 13, 2024Updated 2 years ago
- Python module for running BOFs☆81Nov 28, 2025Updated 10 months ago