oxsecurity / codetotalLinks
Analyze any snippet, file, or repository to detect possible security flaws such as secret in code, open source vulnerability, code security, vulnerability, insecure infrastructure as code, and potential legal issues with open source licenses.
☆79Updated last year
Alternatives and similar repositories for codetotal
Users that are interested in codetotal are comparing it to the libraries listed below
Sorting:
- FastCVE: A Dockerized CVE search tool with API and CLI support for security vulnerability queries.☆60Updated 6 months ago
- 🌐 Visualize and explore IaC ✒️ Create and share notes in VS Code 🤝 Sync notes and findings in real-time with friends☆73Updated last year
- ☆114Updated 2 years ago
- Scan your account for the use of untrusted AMIs☆30Updated this week
- Dependency Combobulator☆94Updated last year
- truffleproc — hunt secrets in process memory (TruffleHog & gdb mashup)☆121Updated 2 years ago
- ☆39Updated last year
- Manager of third-party sources of Semgrep rules 🗂☆90Updated last year
- PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagrams☆106Updated 10 months ago
- Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.2, purl, and vers…☆131Updated 2 weeks ago
- ☆60Updated 2 years ago
- Kubernetes Pwnage for all☆56Updated 5 years ago
- PEACH - a step-by-step framework for modeling and improving SaaS and PaaS tenant isolation, by managing the attack surface exposed by use…☆73Updated 2 years ago
- Pentester-focused Docker registry tool to enumerate and pull images☆37Updated last month
- Virtual environment for learning DevSecOps☆38Updated 8 years ago
- Blogpost series showcasing interesting cloud - web app security bugs☆50Updated 2 years ago
- boostsecurityio/lotp☆139Updated last month
- ☆12Updated 4 years ago
- Documentation of Semgrep: a fast, open-source, static analysis tool.☆47Updated this week
- A Terraform reproducer for IngressNightmare☆25Updated 8 months ago
- 🧪 Correlate Semgrep scans with Python test coverage to prioritize SAST findings and get bug fix suggestions via a self-hosted LLM.☆41Updated last year
- Discover vulnerabilities and container image misconfiguration in production environments.☆56Updated last week
- 🔍A cutting edge context aware GraphQL API fuzzing tool!☆155Updated this week
- WAF bypass PoC☆49Updated 2 years ago
- A compilation of Software Supply Chain Security resources including initiatives, standards, regulations, organizations, vendors, tooling,…☆137Updated last year
- ☆141Updated this week
- An implementation of infrastructure-as-code scanning using dynamic tooling.☆56Updated 3 years ago
- GCP GOAT is the vulnerable application for learn the GCP Security☆69Updated 6 months ago
- Secrets scanner that understands code☆191Updated 2 years ago
- ☆103Updated 3 weeks ago