Alternatives and similar repositories for damn-vulnerable-js-sca

Users that are interested in damn-vulnerable-js-sca are comparing it to the libraries listed below

• owasp-change / owasp-change.github.io
  An Open Letter to the OWASP Board
  ☆107Updated last year
• mllamazares / vulncov
  🧪 Correlate Semgrep scans with Python test coverage to prioritize SAST findings and get bug fix suggestions via a self-hosted LLM.
  ☆39Updated 7 months ago
• codesoap / pfuzz
  A web fuzzer using the httpipe format
  ☆101Updated last year
• SecureStackCo / visualizing-software-supply-chain
  A project to visualize the software supply chain
  ☆52Updated last year
• hashicorp-forge / semgrep-rules
  HashiCorp-relevant rules for the Semgrep code analysis tool
  ☆41Updated last year
• boringtools / git-alerts
  Tool to detect and monitor GitHub org users' public repositories for secrets and sensitive files
  ☆220Updated last month
• boostsecurityio / poutine
  boostsecurityio/poutine
  ☆306Updated last week
• RyanJarv / roles
  Unauthenticated enumeration of AWS IAM Roles.
  ☆25Updated 6 months ago
• omar2535 / GraphQLer
  🔍A cutting edge context aware GraphQL API fuzzing tool!
  ☆143Updated last week
• csdev / ezghsa
  EZGHSA is a command-line tool for summarizing and filtering vulnerability alerts on Github repositories.
  ☆35Updated 7 months ago
• Addepar / RedFlag
  RedFlag uses AI to identify high-risk code changes. Run it in batch mode for release candidate testing or in CI pipelines to flag PRs and…
  ☆151Updated 8 months ago
• trailofbits / deptective
  Deptective automatically determines the native dependencies required to run any arbitrary program or command.
  ☆93Updated 2 weeks ago
• salesforce / lobster-pot
  Scans every git push to your Github organisations to find unwanted secrets.
  ☆87Updated 2 months ago
• elementsinteractive / twyn
  Security tool against dependency typosquatting attacks
  ☆53Updated this week
• iosifache / semgrep-rules-manager
  Manager of third-party sources of Semgrep rules 🗂
  ☆87Updated last year
• Fennerr / PMapper
  A tool for quickly evaluating IAM permissions in AWS.
  ☆73Updated last year
• trufflesecurity / driftwood
  Private key usage verification
  ☆430Updated 3 months ago
• trufflesecurity / EmailGraffiti
  Vandalize old emails. Like an NFT that's easy to prove ownership of.
  ☆35Updated 2 years ago
• DigeeX / raider
  DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider
  ☆139Updated 3 years ago
• rpetrich / deciduous
  App that simplifies building decision trees to model adverse scenarios
  ☆215Updated last year
• bullfrogsec / bullfrog
  Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows
  ☆110Updated this week
• RandoriDev / test-saml-idp
  ☆30Updated 3 years ago
• nullenc0de / ChromeAudit
  Nuclei plugins to audit Chrome extensions
  ☆65Updated last year
• RefactorSecurity / vscode-security-notes
  Create notes during a security code review in VSCode 📝 Import your favorite SAST tool findings 🛠️ and collaborate with others 🤝
  ☆133Updated 3 months ago
• tracebit-com / find-s3-account
  Sample code for finding AWS Account ID of an S3 bucket.
  ☆49Updated last year
• assetnote / ghostbuster
  Eliminate dangling elastic IPs by performing analysis on your resources within all your AWS accounts.
  ☆275Updated 10 months ago
• riskframe / ai-rmm
  AI Resilience Maturity Model
  ☆25Updated 11 months ago
• klarna-incubator / gram
  Gram is Klarna's own threat model diagramming tool
  ☆322Updated last week
• spaceraccoon / ogp-ctf-2024
  A web CTF for training developers in bug hunting and secure coding!
  ☆99Updated 6 months ago
• shivasurya / code-pathfinder
  Code Pathfinder, the open-source alternative to GitHub CodeQL built with GoLang. Built for advanced structural search, derive insights, f…
  ☆63Updated this week