🧪 Correlate Semgrep scans with Python test coverage to prioritize SAST findings and get bug fix suggestions via a self-hosted LLM.
☆43Dec 12, 2024Updated last year
Alternatives and similar repositories for vulncov
Users that are interested in vulncov are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A tool to audit Hex dependencies, to make sure your ✨ gleam projects really sparkle!☆26Jun 21, 2026Updated last month
- Semgrep-based Policy Controller for Kubernetes☆47Apr 4, 2025Updated last year
- A collection of various scripts and automations to simplify Checkmarx SAST and IAST setup and use☆14Aug 30, 2018Updated 7 years ago
- ☆72Oct 24, 2025Updated 9 months ago
- An IAM Simulator that outputs detailed explains of how a request was evaluated.☆103Updated this week
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- ☆40Aug 2, 2024Updated 2 years ago
- A tool for secrets management, encryption as a service, and privileged access management☆12Jul 17, 2025Updated last year
- Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.☆41Dec 12, 2023Updated 2 years ago
- Low-effort reachability analysis for third-party code vulnerabilities.☆22Jul 11, 2023Updated 3 years ago
- A terminal-first approach to CodeQL multi-repo variant analysis☆17Jul 15, 2026Updated last month
- Build a CVE library with aggregated CISA, EPSS and CVSS data☆29Sep 27, 2023Updated 2 years ago
- Web Server Vulnerability Scanning Tool☆38Mar 11, 2025Updated last year
- Provide some tips to handle Injection into application code (OWASP TOP 10 - A1).☆10Nov 11, 2020Updated 5 years ago
- Burp Suite extension for testing Passkey systems.☆76Apr 1, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Security tool against dependency typosquatting attacks☆56Aug 5, 2026Updated 2 weeks ago
- Template Go app repo with local test/lint/build/vulnerability check workflow, and on tag image test/build/release pipelines, with ko gene…☆104Apr 23, 2024Updated 2 years ago
- 😹 Python project to bruteforce Apache Tomcat manager login with known-default credentials☆96Mar 12, 2024Updated 2 years ago
- Additional active scan checks for BURP☆29Oct 3, 2024Updated last year
- An OpenAI API Compatible Honeypot Gateway☆27Mar 17, 2025Updated last year
- This terraform provider can be used to get remote code execution by injecting a dummy resource in a writeable state file.☆65Jan 25, 2025Updated last year
- ☆14Updated this week
- @DisCo is a graph based datastore designed to minimize reverse engineering efforts.☆12Jun 18, 2026Updated 2 months ago
- Tool created for Red Team to test default credentials on SSH and WinRM and then execute scripts with those credentials before the passwor…☆41May 7, 2023Updated 3 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Proof-of-concept modular implant platform leveraging v8☆55Mar 4, 2025Updated last year
- Unauthenticated enumeration of AWS IAM Roles.☆28Apr 18, 2026Updated 4 months ago
- A very simple open source implementation of Google's Project Naptime☆208Mar 27, 2025Updated last year
- frida-codeshare-scripts.collection of useful FRIDA scripts.A curated list of Frida resources.纯实用frida脚本收集,脚本全网最全.不定时同步更新.☆114Mar 12, 2026Updated 5 months ago
- Crashbench is a LLM benchmark to measure bug-finding and reporting capabilities of LLMs☆14Aug 7, 2026Updated last week
- ☆55Feb 4, 2025Updated last year
- Audit your GitHub Actions workflow runs to see exactly which Actions were downloaded☆91Jun 15, 2026Updated 2 months ago
- A multifaceted security tool which leverages Public GitHub REST APIs for OSINT, Forensics, Pentesting and more.☆184Jan 9, 2026Updated 7 months ago
- ☆14Mar 6, 2023Updated 3 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Secure Code Review AI Agent (SeCoRA) - AI SAST☆58Jan 29, 2025Updated last year
- ☆19Dec 2, 2024Updated last year
- ☆245Updated this week
- Funny Fuzzing Wordlist☆14Jun 14, 2022Updated 4 years ago
- Improving Precision in Static Analysis with LLMs☆16Oct 1, 2025Updated 10 months ago
- A tool to uncover undocumented APIs from the AWS Console.☆123Mar 16, 2026Updated 5 months ago
- Collection of Semgrep rules for security analysis☆10Mar 30, 2024Updated 2 years ago