Alternatives and similar repositories for owasp-change.github.io

Users that are interested in owasp-change.github.io are comparing it to the libraries listed below

• boringtools / git-alerts
  Tool to detect and monitor GitHub org users' public repositories for secrets and sensitive files
  ☆229Updated 2 weeks ago
• SecureStackCo / visualizing-software-supply-chain
  A project to visualize the software supply chain
  ☆58Updated 2 years ago
• Hacking-the-Cloud / htc-ctfs
  Holds the public Hacking the Cloud CTFs.
  ☆63Updated last year
• trufflesecurity / how-to-rotate
  An open-source collection of API key rotation tutorials.
  ☆76Updated 5 months ago
• pypi-data / pypi-aws-secrets
  This repo scans pypi for AWS keys
  ☆106Updated last year
• nccgroup / ccs
  ☆114Updated 2 years ago
• trufflesecurity / driftwood
  Private key usage verification
  ☆432Updated 10 months ago
• Addepar / RedFlag
  RedFlag uses AI to identify high-risk code changes. Run it in batch mode for release candidate testing or in CI pipelines to flag PRs and…
  ☆159Updated last year
• firefart / hijagger
  Checks all maintainers of all NPM and Pypi packages for hijackable packages through domain re-registration
  ☆304Updated 2 weeks ago
• csdev / ezghsa
  EZGHSA is a command-line tool for summarizing and filtering vulnerability alerts on Github repositories.
  ☆35Updated last month
• trufflesecurity / EmailGraffiti
  Vandalize old emails. Like an NFT that's easy to prove ownership of.
  ☆35Updated 2 years ago
• serain / crack-sec-eng-interviews
  Cracking the Security Engineer Interviews
  ☆55Updated 3 years ago
• DigeeX / raider
  DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider
  ☆139Updated 4 years ago
• boostsecurityio / lotp
  boostsecurityio/lotp
  ☆138Updated 2 weeks ago
• mllamazares / STRIDE-vs-ASVS
  🖇️ equivalence table between OWASP ASVS standard and STRIDE threat modeling methodology.
  ☆76Updated last year
• boostsecurityio / poutine
  boostsecurityio/poutine
  ☆361Updated last week
• lanrat / certgraph
  An open source intelligence tool to crawl the graph of certificate Alternate Names
  ☆366Updated 5 months ago
• Santandersecurityresearch / DrHeader
  drHEADer helps with the audit of security headers received in response to a single request or a list of requests.
  ☆112Updated last year
• vendorsec / mvsp
  Minimum Viable Secure Product mvsp.dev
  ☆204Updated last year
• mllamazares / vulncov
  🧪 Correlate Semgrep scans with Python test coverage to prioritize SAST findings and get bug fix suggestions via a self-hosted LLM.
  ☆42Updated last year
• cure53 / Contracts
  A small collection of potentially useful contract templates
  ☆418Updated last month
• oshp / oshp-validator
  Venom tests suite to validate an HTTP security response headers configuration against OSHP recommendation.
  ☆138Updated 2 weeks ago
• assetnote / ghostbuster
  Eliminate dangling elastic IPs by performing analysis on your resources within all your AWS accounts.
  ☆278Updated last year
• juice-shop / multi-juicer
  Host and manage multiple Juice Shop instances for security trainings and Capture The Flags
  ☆308Updated this week
• xvnpw / ai-threat-modeling-action
  AI featured threat modeling and security review action
  ☆45Updated last year
• jthack / hero
  a hackbot proof-of-concept
  ☆41Updated last year
• Whitespots-OU / security-requirements-generator
  A small tool to help developers understand a huge set of security requirements from appsec teams
  ☆46Updated 3 years ago
• Checkmarx / capital
  A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities. Use c{api}tal to learn, train and exploit API Sec…
  ☆319Updated 5 months ago
• controlplaneio / truffleproc
  truffleproc — hunt secrets in process memory (TruffleHog & gdb mashup)
  ☆122Updated 2 years ago
• apiiro / malicious-code-ruleset
  Focused malicious code detection ruleset, with a high protection-to-noise ratio
  ☆142Updated 11 months ago