lunasec-io / damn-vulnerable-js-scaLinks
An intentionally vulnerable Javascript app containing notable vulnerabilities in its dependencies.
☆19Updated 2 years ago
Alternatives and similar repositories for damn-vulnerable-js-sca
Users that are interested in damn-vulnerable-js-sca are comparing it to the libraries listed below
Sorting:
- An Open Letter to the OWASP Board☆107Updated 2 years ago
- 🧪 Correlate Semgrep scans with Python test coverage to prioritize SAST findings and get bug fix suggestions via a self-hosted LLM.☆41Updated 11 months ago
- Unauthenticated enumeration of AWS IAM Roles.☆26Updated 2 months ago
- A web fuzzer using the httpipe format☆101Updated last year
- a hackbot proof-of-concept☆40Updated last year
- EZGHSA is a command-line tool for summarizing and filtering vulnerability alerts on Github repositories.☆35Updated 2 months ago
- HashiCorp-relevant rules for the Semgrep code analysis tool☆42Updated 2 years ago
- A project to visualize the software supply chain☆54Updated 2 years ago
- Manager of third-party sources of Semgrep rules 🗂☆90Updated last year
- DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider☆139Updated 4 years ago
- RedFlag uses AI to identify high-risk code changes. Run it in batch mode for release candidate testing or in CI pipelines to flag PRs and…☆155Updated last year
- Function callpath mapping analysis tool for Go☆34Updated 8 months ago
- Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows☆113Updated last week
- AI Resilience Maturity Model☆25Updated last year
- Security tool against dependency typosquatting attacks☆54Updated this week
- Semgrep-based Policy Controller for Kubernetes☆47Updated 7 months ago
- Trail of Bits Testing Handbook☆82Updated last week
- ☆49Updated 2 years ago
- A GitHub Action that creates a SBOM from your application so you can meet compliance and security requirements. Add this to your dev, sta…☆25Updated 2 years ago
- 🔍A cutting edge context aware GraphQL API fuzzing tool!☆154Updated 2 months ago
- Deptective automatically determines the native dependencies required to run any arbitrary program or command.☆123Updated 3 weeks ago
- A security tool that detects malicious packages from external vulnerability feeds and searches for them in your package registries or art…☆66Updated this week
- Tool to detect and monitor GitHub org users' public repositories for secrets and sensitive files☆227Updated 5 months ago
- PII detection platform, leveraging human-in-the-loop AI☆53Updated 11 months ago
- Scans every git push to your Github organisations to find unwanted secrets.☆87Updated 6 months ago
- atom is a novel intermediate representation for applications and a standalone tool that is powered by chen.☆74Updated this week
- ☆114Updated 2 years ago
- MCP security wrapper☆202Updated this week
- Private key usage verification☆432Updated 7 months ago
- MultiStep MCP That Returns CVE Information With EPSS Score☆12Updated 6 months ago