oxsecurity / codetotalLinks
Analyze any snippet, file, or repository to detect possible security flaws such as secret in code, open source vulnerability, code security, vulnerability, insecure infrastructure as code, and potential legal issues with open source licenses.
☆77Updated 10 months ago
Alternatives and similar repositories for codetotal
Users that are interested in codetotal are comparing it to the libraries listed below
Sorting:
- 🌐 Visualize and explore IaC ✒️ Create and share notes in VS Code 🤝 Sync notes and findings in real-time with friends☆73Updated last year
- FastCVE: A Dockerized CVE search tool with API and CLI support for security vulnerability queries.☆52Updated 3 weeks ago
- WAF bypass PoC☆48Updated last year
- Dependency Combobulator☆93Updated last year
- A comprehensive, systematic and actionable way to understand attacker behaviors and techniques with respect to the software supply chain☆96Updated 4 months ago
- Manager of third-party sources of Semgrep rules 🗂☆87Updated 11 months ago
- Sharing software supply chain security open source projects☆50Updated 2 years ago
- ☆36Updated 10 months ago
- Proof-of-concept code for research into GitHub Actions Cache poisoning.☆21Updated 3 months ago
- Find which of your direct GitHub dependencies is susceptible to RepoJacking attacks☆58Updated 3 years ago
- A project to visualize the software supply chain☆51Updated last year
- ☆111Updated 2 years ago
- Konstellation is a configuration-driven CLI tool to enumerate cloud resources and store the data into Neo4j.☆23Updated last year
- Create notes during a security code review in VSCode 📝 Import your favorite SAST tool findings 🛠️ and collaborate with others 🤝☆133Updated 2 months ago
- PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagrams☆105Updated 4 months ago
- boostsecurityio/lotp☆126Updated 2 months ago
- PEACH - a step-by-step framework for modeling and improving SaaS and PaaS tenant isolation, by managing the attack surface exposed by use…☆71Updated 2 years ago
- Determine privileges from cloud credentials via brute-force testing.☆69Updated 10 months ago
- Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts☆61Updated 2 years ago
- Damn Vulnerable SCA Application☆37Updated 2 weeks ago
- Focused malicious code detection ruleset, with a high protection-to-noise ratio☆120Updated 4 months ago
- Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. …☆65Updated last year
- Vulnerable by Design AWS Cloud Development Kit (CDK) Infrastructure☆47Updated last year
- HashiCorp-relevant rules for the Semgrep code analysis tool☆41Updated last year
- Nuclei plugins to audit Chrome extensions☆65Updated 11 months ago
- Discover vulnerabilities and container image misconfiguration in production environments.☆56Updated 2 weeks ago
- truffleproc — hunt secrets in process memory (TruffleHog & gdb mashup)☆119Updated last year
- ☆45Updated 7 months ago
- Fast, simple library in Go to fetch CVEs from the National Vulnerability Database feeds☆27Updated last year
- Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.1, purl, and vers…☆120Updated last week