fabric8-analytics / cvejob
A tool which tries to map CVEs from NVD to packages in supported ecosystems (Maven, NPM, PyPI).
☆12Updated last year
Related projects ⓘ
Alternatives and complementary repositories for cvejob
- ☆23Updated 7 years ago
- ☆15Updated 4 years ago
- Automated dynamic security analysis by emulation of IoT firmware images in CI-pipelines.☆11Updated 3 years ago
- A place to systematically store software bill of materials (SBOM) documents.☆44Updated last year
- Scan pypi for typosquatting☆37Updated last year
- ☆13Updated last month
- Crowdsourced fuzzing cluster. 🚀☆21Updated 3 years ago
- Binary Ninja plugin for restoring function names from stripped Golang binaries☆13Updated 4 years ago
- An auto-scoring capture-the-flag game focusing on TOCTOU vulnerabilities☆18Updated 4 years ago
- A taxonomy of attacks on software supply chains in the form of an attack tree, based on and linked to numerous real-world incidents and o…☆71Updated 3 weeks ago
- The Binary Mutation code based on Uroboros☆14Updated 5 years ago
- ☆22Updated 2 years ago
- Laniakea is a utility for managing instances at various cloud providers and aids in setting up a fuzzing cluster.☆27Updated 3 years ago
- Static code analysis of refpolicy style SELinux policy☆38Updated 3 weeks ago
- A Security Scanner for Go☆26Updated 5 years ago
- Default query sets for Joern☆25Updated 3 years ago
- A library implementing CVSS v2 and v3 scores☆31Updated 4 years ago
- A introductory workshop to getting started with fuzzing using american fuzzy lop (AFL)☆22Updated 5 years ago
- Exploit CVE-2021-25735: Kubernetes Validating Admission Webhook Bypass☆18Updated 3 years ago
- egrets monitors egress☆45Updated 4 years ago
- Fuzzing Infrastructure with k8s & cephfs☆12Updated 4 years ago
- Write ups of solution for CTF challenges I solved☆25Updated 3 years ago
- Labeled vulnerability-package match pairs used as ground truth to evaluate vulnerability scanners☆12Updated last month
- Low-effort reachability analysis for third-party code vulnerabilities.☆19Updated last year
- This novel black-box web vulnerability scanner attempts to infer the state machine of the web application.☆19Updated 4 years ago
- Download a Bunch of Malware for Demos and Testing☆13Updated 6 years ago
- Downloader for Firefox/jsshell builds for fuzzing.☆37Updated last week
- Bad packages from the pypi repository☆9Updated 5 years ago
- Draft of generic instrumentation tool based on QEMU using eBPF to implement trivial instrumentations with trivial code☆18Updated 4 years ago
- MapGuard is a library that enforces a security policy for mmap based page allocations.☆21Updated 2 years ago