lirantal / cwe-sdk
A Common Weakness Enumeration (CWE) Node.js SDK compliant with MITRE / CAPEC
☆10Updated 4 years ago
Alternatives and similar repositories for cwe-sdk
Users that are interested in cwe-sdk are comparing it to the libraries listed below
Sorting:
- Externalize Java application access to protected resources as log messages.☆41Updated 3 weeks ago
- Safelog4j is an instrumentation-based security tool to help teams discover, verify, and solve log4shell vulnerabilities without scanning …☆41Updated 11 months ago
- Identify vulnerable libraries in Maven dependencies☆46Updated 2 years ago
- General Open Architecture Security Questionnaire☆31Updated last year
- ☆14Updated last year
- A zero-dependency tool for finding secrets in directories☆10Updated 4 years ago
- Vendor-Neutral Security Tool Automation Controller (over REST)☆28Updated 5 years ago
- Vulnerability consolidation and management tool, enhances scan results by merging different findings of the same weakness across multiple…☆24Updated 2 years ago
- Security scanning & static analysis tool☆94Updated 7 months ago
- A static analysis API for finding deserialization attack gadgets☆38Updated 2 years ago
- OWASP Foundation Web Respository☆35Updated 8 months ago
- Jekyll Files for cloudsecwiki.com☆50Updated 3 years ago
- Dependency Combobulator☆93Updated last year
- All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities☆27Updated 3 years ago
- Evaluation Framework for Dependency Analysis (EFDA)☆43Updated 3 years ago
- Kubernetes Security Testing Guide☆26Updated last year
- Open Security Summit 2018☆29Updated 4 years ago
- A command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration.☆56Updated 8 months ago
- A collection of various scripts and automations to simplify Checkmarx SAST and IAST setup and use☆14Updated 6 years ago
- Burp Suite extension to passively scan for applications revealing server error messages☆66Updated last year
- DEF CON 26 Workshop - Attacking & Auditing Docker Containers Using Open Source☆108Updated 5 years ago
- Collection of python helper API's for interacting with LGTM.com in ways the official API doesn't support.☆24Updated 3 years ago
- Semgrep rules corresponding to the OWASP ASVS standard☆27Updated 4 years ago
- This Repository contains the stable beta preview of the next major secureCodeBox (SCB) release v2.0.0.☆24Updated 4 years ago
- INTERCEPT / Policy as Code Auditing & Compliance☆84Updated 3 months ago
- javaspringvulny - a Spring Boot web application built wrong on purpose☆19Updated 3 weeks ago
- ☆20Updated 6 years ago
- NCC Group Template for the Microsoft Threat Modeling Tool 2016 for Automotive Security☆47Updated 4 years ago
- ☆74Updated 4 years ago
- Mixeway is security orchestrator for vulnerability scanners which enable easy plug in integration with CICD pipelines. MixewayBackend pro…☆16Updated 7 months ago