doyensec / safeurl
A Server Side Request Forgery (SSRF) protection library. Made with 🖤 by Doyensec LLC.
☆93Updated 6 months ago
Related projects ⓘ
Alternatives and complementary repositories for safeurl
- 🚰 Static taint analysis for Go programs.☆57Updated 3 months ago
- ☆95Updated this week
- ☆31Updated last year
- Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.☆39Updated 11 months ago
- Static code analysis tool to find unsafe usages in Go packages and their dependencies☆41Updated 4 years ago
- NamespaceHound is the tool for detecting the risk of potential namespace crossing violations in multi-tenant clusters.☆59Updated 8 months ago
- Proof-of-concept code for research into GitHub Actions Cache poisoning.☆22Updated 3 months ago
- WAF bypass PoC☆43Updated last year
- Package retryablehttp provides a familiar HTTP client interface with automatic retries and exponential backoff☆121Updated this week
- Manager of third-party sources of Semgrep rules 🗂☆76Updated 4 months ago
- ☆24Updated 6 months ago
- Konstellation is a configuration-driven CLI tool to enumerate cloud resources and store the data into Neo4j.☆19Updated last year
- Create tar/zip archives that try to exploit zipslip vulnerability.☆45Updated 2 months ago
- Go library for sarif - Static Analysis Results Interchange Format☆66Updated 3 months ago
- Kubernetes Unhinged Shell 😎☆45Updated 2 years ago
- Template Go app repo with local test/lint/build/vulnerability check workflow, and on tag image test/build/release pipelines, with ko gene…☆94Updated 6 months ago
- PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagrams☆98Updated 9 months ago
- truffleproc — hunt secrets in process memory (TruffleHog & gdb mashup)☆110Updated last year
- a tool to audit the istio service mesh☆173Updated 3 years ago
- ZAP Go API☆61Updated 4 months ago
- Generative and mutative fuzzer for Kubernetes admission controller chains by automatically parsing the cluster api specification.☆70Updated last year
- Intercept stdin/stdout/stderr for any process☆197Updated 2 years ago
- Research on various techniques to bypass default falco ruleset (based on falco v0.28.1).☆80Updated 9 months ago
- A security tool designed to help review merged code changes to open source maintained repositories via LLM assisted review to safeguard a…☆28Updated last month
- ☆40Updated last month
- Asset definitions for an organization's external attack surface☆44Updated last week
- Sniff and attack networks that use IP-in-IP or VXLAN encapsulation protocols.☆21Updated 2 months ago
- boostsecurityio/lotp☆101Updated 7 months ago
- Cloud agnostic IAM permissions enumerator☆139Updated 2 months ago