google / security-testbeds
☆33Updated last week
Alternatives and similar repositories for security-testbeds:
Users that are interested in security-testbeds are comparing it to the libraries listed below
- Plusfish is a classic web application vulnerability scanner/fuzzer and aimed at security professionals☆28Updated 2 years ago
- ☆10Updated last month
- Example repository for GitHub Actions Time of Check to Time of Use (TOCTOU vulnerabilities)☆22Updated 6 months ago
- Trail of Bits Testing Handbook☆60Updated last week
- insject is a tool for poking at containers. It enables you to run an arbitrary command in a container or any mix of Linux namespaces.☆49Updated 3 years ago
- A web server designed to shut off on command to exploit DNS rebinding in Chromium-based browsers☆11Updated last year
- Unsafe Unpacking Vulnerability: Lab Code, Semgrep Rules and Secure Implementation Guide☆33Updated last month
- ☆43Updated 9 months ago
- ☆83Updated 7 months ago
- Proof of Concepts for unsafe deserialization in Ruby☆17Updated 3 months ago
- Miscellaneous one-off scripts, exploits, tools, sample code, ...☆10Updated 5 years ago
- ☆22Updated last month
- ☆26Updated 2 years ago
- Manager of third-party sources of Semgrep rules 🗂☆77Updated 6 months ago
- An auto-scoring capture-the-flag game focusing on TOCTOU vulnerabilities☆19Updated 4 years ago
- A collection of my Semgrep rules☆48Updated last year
- Static Token And Credential Scanner☆95Updated last year
- Paper, data and code from Investigating Potential Security Vulnerability Manifestation through Various Analyses & Inferences Regarding In…☆18Updated 3 years ago
- My collection of Semgrep rules for vulnerability detection on source code (swift, java)☆32Updated 10 months ago
- Proof-of-concept code for research into GitHub Actions Cache poisoning.☆21Updated last month
- ☆51Updated last month
- Exploit CVE-2021-25735: Kubernetes Validating Admission Webhook Bypass☆18Updated 3 years ago
- AyedFuzzer is a small File-Format-Fuzzer with 3 options (File-mutating, WinDbg-interactive monitor, multi-processing) for windows executa…☆17Updated last month
- ☆77Updated 7 months ago
- A Python-based tool to create zip, tar and cpio archives to exploit common archive library issues and developer mistakes☆42Updated last year
- ☆74Updated 4 years ago
- ☆32Updated last year
- #INFILTRATE19 raptor's party pack.☆30Updated last year
- CFPsec is a client program that retrieves the list of Call For Papers or/and upcoming Hacking/Security Conferences based on cfptime.org w…☆58Updated 2 months ago
- Kubernetes Unhinged Shell 😎☆45Updated 2 years ago