githubsatelliteworkshops / codeql
GitHub Satellite 2020 workshops on finding security vulnerabilities with CodeQL for Java/JavaScript.
☆210Updated 6 months ago
Alternatives and similar repositories for codeql:
Users that are interested in codeql are comparing it to the libraries listed below
- Personal CodeQL queries☆62Updated last week
- A static byte code analyzer for Java deserialization gadget research☆242Updated 8 years ago
- [Deprecated] GitHub's Field Team's CodeQL Custom Queries, Suites, and Configurations. See GitHubSecurityLab/CodeQL-Community-Packs instea…☆82Updated 11 months ago
- My CodeQL queries collection☆96Updated last year
- When MVC magic turns black☆292Updated 4 years ago
- Grammar-based HTTP/2 fuzzer with mutation ability☆43Updated 2 years ago
- Starter workspace to use with the CodeQL extension for Visual Studio Code.☆519Updated this week
- ☆71Updated 3 years ago
- Use HTTP Smuggling Lab to learn HTTP Smuggling.☆349Updated 2 years ago
- An example repository that demonstrates how the build custom CodeQL bundles that include query customizations through the `Customizations…☆25Updated 2 years ago
- GreHack 2021 CodeQL for Java workshop☆75Updated 3 years ago
- ☆17Updated 6 years ago
- Finding Java gadget chains with CodeQL☆169Updated 3 months ago
- Prepackaged and precompiled github codeql container for rapid analysis, deployment and development.☆118Updated last year
- Collection of community-driven CodeQL query, library and extension packs☆148Updated last week
- A test suite built with Mocha/Chai to test for behavioral differences between image libraries for the web☆70Updated 4 years ago
- ☆189Updated 5 months ago
- Ready to use docker image for CodeQL☆89Updated last year
- The OpenSSF CVE Benchmark consists of code and metadata for over 200 real life CVEs, as well as tooling to analyze the vulnerable codebas…☆142Updated last year
- Deprecated: Please visit https://github.com/github/codeql instead.☆81Updated 3 years ago
- Generic SAST Library☆131Updated 5 months ago
- ☆60Updated 2 years ago
- ☆148Updated 5 years ago
- Intentionally vulnerable Go web app.☆43Updated 2 months ago
- A vulnerable application exposing Spring Boot Actuators☆122Updated 6 years ago
- Grammar-based HTTP/1 fuzzer with mutation ability☆250Updated 5 months ago
- cvebase is a community-driven vulnerability data platform to discover the world's top security researchers and their latest disclosed vul…☆141Updated 4 years ago
- Apache Tomcat + MongoDB Remote Code Execution☆114Updated 4 years ago
- JRE8u20_RCE_Gadget☆251Updated 8 years ago
- This repo contains the files required to perform a CSRF attack using Flash and HTTP 307 redirections.☆76Updated 7 years ago