Alternatives and similar repositories for damn-vulnerable-js-sca

Users that are interested in damn-vulnerable-js-sca are comparing it to the libraries listed below

• iosifache / semgrep-rules-manager
  Manager of third-party sources of Semgrep rules 🗂
  ☆82Updated 9 months ago
• mllamazares / vulncov
  🧪 Correlate Semgrep scans with Python test coverage to prioritize SAST findings and get bug fix suggestions via a self-hosted LLM.
  ☆39Updated 5 months ago
• boostsecurityio / lotp
  boostsecurityio/lotp
  ☆125Updated last month
• Santiago-Labs / go-ocsf
  ☆66Updated this week
• nccgroup / ccs
  ☆110Updated last year
• RyanJarv / roles
  Unauthenticated enumeration of AWS IAM Roles.
  ☆25Updated 4 months ago
• trufflesecurity / WhoAmISlack
  Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.
  ☆41Updated last year
• elementsinteractive / twyn
  Security tool against dependency typosquatting attacks
  ☆39Updated last week
• SecureStackCo / visualizing-software-supply-chain
  A project to visualize the software supply chain
  ☆50Updated last year
• hashicorp-forge / semgrep-rules
  HashiCorp-relevant rules for the Semgrep code analysis tool
  ☆41Updated last year
• semgr8ns / semgr8s
  Semgrep-based Policy Controller for Kubernetes
  ☆47Updated last month
• kpolley / PIIDetective
  PII detection platform, leveraging human-in-the-loop AI
  ☆52Updated 5 months ago
• jeremylong / malicious-dependencies
  Demonstrates how a malicious dependency could negatively impact the build output.
  ☆26Updated last year
• omar2535 / GraphQLer
  🔍A cutting edge context aware GraphQL API fuzzing tool!
  ☆140Updated 3 weeks ago
• AdnaneKhan / ActionsCacheBlasting
  Proof-of-concept code for research into GitHub Actions Cache poisoning.
  ☆21Updated 2 months ago
• nullenc0de / ChromeAudit
  Nuclei plugins to audit Chrome extensions
  ☆64Updated 9 months ago
• nccgroup / ConMachi
  Container Blackbox Security Auditing Tool: enumerates security configuration from within the target container
  ☆106Updated 6 years ago
• boringtools / git-alerts
  Tool to detect and monitor GitHub org users' public repositories for secrets and sensitive files
  ☆218Updated 3 weeks ago
• bullfrogsec / bullfrog
  Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows
  ☆110Updated this week
• RandoriDev / test-saml-idp
  ☆30Updated 3 years ago
• ncc-erik-steringer / Aerides
  An implementation of infrastructure-as-code scanning using dynamic tooling.
  ☆56Updated 3 years ago
• AnubisSec / GroovyWaiter
  ☆17Updated 3 years ago
• luisfontes19 / orgsec-guide
  A comprehensive checklist and guide for organizations looking to implement a robust cybersecurity program
  ☆27Updated this week
• RefactorSecurity / vscode-security-notes
  Create notes during a security code review in VSCode 📝 Import your favorite SAST tool findings 🛠️ and collaborate with others 🤝
  ☆133Updated last month
• owasp-change / owasp-change.github.io
  An Open Letter to the OWASP Board
  ☆106Updated last year
• doyensec / PESD-Exporter-Extension
  PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagrams
  ☆104Updated 3 months ago
• AdnaneKhan / ActionsTOCTOU
  Example repository for GitHub Actions Time of Check to Time of Use (TOCTOU vulnerabilities)
  ☆23Updated last week
• jthack / hero
  a hackbot proof-of-concept
  ☆39Updated last year
• mllamazares / STRIDE-vs-ASVS
  🖇️ STRIDE vs. ASVS equivalence table
  ☆76Updated 8 months ago
• spaceraccoon / ogp-ctf-2024
  A web CTF for training developers in bug hunting and secure coding!
  ☆99Updated 4 months ago