A collection of my Semgrep rules
☆54Jul 4, 2023Updated 3 years ago
Alternatives and similar repositories for semgrep-rules
Users that are interested in semgrep-rules are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- My custom semgrep rules☆24Sep 13, 2020Updated 6 years ago
- Custom semgrep rules registry☆14Aug 23, 2022Updated 4 years ago
- my-semgrep-rules☆10Jun 15, 2022Updated 4 years ago
- ☆246Updated this week
- Ricerca che mostra come scrivere regole per SemGrep per cercare SQL Injection nei plugin di Wordpress che usano action AJAX☆20Jul 22, 2023Updated 3 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- My collection of Semgrep rules for vulnerability detection on source code (swift, java, cobol)☆44Dec 3, 2025Updated 10 months ago
- HashiCorp-relevant rules for the Semgrep code analysis tool☆42Oct 3, 2023Updated 3 years ago
- Collection of Semgrep rules for security analysis☆10Mar 30, 2024Updated 2 years ago
- ☆16Sep 20, 2023Updated 3 years ago
- A collection of Semgrep rules derived from the OWASP MASTG specifically for Android applications.☆345Jun 5, 2026Updated 4 months ago
- A collection of Semgrep rules which followed security guidelines for .NET and Java.☆24Oct 4, 2021Updated 5 years ago
- A collection of my Semgrep rules to facilitate vulnerability research.☆881Updated this week
- Semgrep queries developed by Trail of Bits.☆535May 7, 2026Updated 5 months ago
- frida-server binary patcher that defeats string/port/thread anti-Frida detection☆21Aug 11, 2026Updated 2 months ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Electro-XSS , a buggy desktop app developed with the Electron framework.☆13Feb 10, 2022Updated 4 years ago
- An extension to use Semgrep inside Burp Suite.☆90May 23, 2025Updated last year
- Material from presentations done by GoSecure researchers☆34Oct 10, 2023Updated 3 years ago
- POSIX script for mail security checks of domain names☆75Jul 24, 2023Updated 3 years ago
- Focused malicious code detection ruleset, with a high protection-to-noise ratio☆151Feb 24, 2025Updated last year
- nmapParser.py is a tool developed for consultants doing nmap scans against a large range of hosts. I found it easy to identify hosts that…☆14Jan 19, 2016Updated 10 years ago
- Semgrep Community Edition rules, maintained by Semgrep and the community. Free to use under the Semgrep Rules License.☆1,287Oct 27, 2026Updated last week
- OpenAPI fuzzer for web applications written in go☆14Apr 25, 2026Updated 6 months ago
- Script for downloading Burp Suite extension files☆12Jan 29, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- OWASP Threat Dragon core files☆12Jan 26, 2026Updated 9 months ago
- ☆11Dec 29, 2024Updated last year
- ☆83May 9, 2024Updated 2 years ago
- Tool for helping in the exploitation of path traversal vulnerabilities in Java web applications☆33Nov 4, 2022Updated 3 years ago
- A .NET tool that uses AppDomain's to enable dynamic execution and escape detection.☆29Nov 25, 2019Updated 6 years ago
- node.js function serialization/deserialization☆10Jun 20, 2019Updated 7 years ago
- ☆106Jan 3, 2023Updated 3 years ago
- Semgrep rules corresponding to the OWASP ASVS standard☆27Nov 2, 2020Updated 6 years ago
- Broken web app intentionally built with pentesting obstacles☆16Jun 21, 2019Updated 7 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ☆11Aug 31, 2023Updated 3 years ago
- tetctf2020_amf_writeups☆20Jan 3, 2021Updated 5 years ago
- A dockerized, improved version of the Impacket smbserver.py☆38Jun 27, 2019Updated 7 years ago
- swagroutes is a command-line tool that extracts and lists API routes from Swagger files in YAML or JSON format.☆61Apr 23, 2023Updated 3 years ago
- Command line fuzzer and bruteforcer 🌪 wfuzz for command☆96Apr 21, 2026Updated 6 months ago
- SecureEye is an AI tool for secure code review. It assesses code for vulnerabilities, and common attack vectors☆14May 21, 2024Updated 2 years ago
- An Open Attack/Defense Infrastructure Simulation Tool☆17Sep 2, 2026Updated 2 months ago