oxsecurity / codetotalLinks
Analyze any snippet, file, or repository to detect possible security flaws such as secret in code, open source vulnerability, code security, vulnerability, insecure infrastructure as code, and potential legal issues with open source licenses.
☆79Updated last year
Alternatives and similar repositories for codetotal
Users that are interested in codetotal are comparing it to the libraries listed below
Sorting:
- 🧪 Correlate Semgrep scans with Python test coverage to prioritize SAST findings and get bug fix suggestions via a self-hosted LLM.☆41Updated 10 months ago
- FastCVE: A Dockerized CVE search tool with API and CLI support for security vulnerability queries.☆56Updated 4 months ago
- Scan your account for the use of untrusted AMIs☆30Updated 2 months ago
- PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagrams☆106Updated 9 months ago
- Manager of third-party sources of Semgrep rules 🗂☆90Updated last year
- ☆114Updated 2 years ago
- Pentester-focused Docker registry tool to enumerate and pull images☆35Updated last week
- A collection of Semgrep rules which followed security guidelines for .NET and Java.☆24Updated 4 years ago
- 🌐 Visualize and explore IaC ✒️ Create and share notes in VS Code 🤝 Sync notes and findings in real-time with friends☆74Updated last year
- truffleproc — hunt secrets in process memory (TruffleHog & gdb mashup)☆120Updated 2 years ago
- WAF bypass PoC☆49Updated 2 years ago
- Dependency Combobulator☆93Updated last year
- Focused malicious code detection ruleset, with a high protection-to-noise ratio☆127Updated 8 months ago
- Kubernetes Pwnage for all☆56Updated 4 years ago
- ☆39Updated last year
- A comprehensive, systematic and actionable way to understand attacker behaviors and techniques with respect to the software supply chain☆96Updated 8 months ago
- A compilation of Software Supply Chain Security resources including initiatives, standards, regulations, organizations, vendors, tooling,…☆138Updated last year
- Proof-of-concept code for research into GitHub Actions Cache poisoning.☆21Updated 7 months ago
- Virtual environment for learning DevSecOps☆38Updated 7 years ago
- Discover vulnerabilities and container image misconfiguration in production environments.☆56Updated last month
- Automated privilege escalation of the world's most popular Docker images.☆69Updated 2 years ago
- Secrets scanner that understands code☆191Updated last year
- Blogpost series showcasing interesting cloud - web app security bugs☆50Updated 2 years ago
- A curated list of argument injection vectors☆41Updated 9 months ago
- This tool analyzes a given Gitlab repository and searches for dangling or force-pushed commits containing potential secret or interesting…☆47Updated last year
- Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.☆42Updated last year
- ☆103Updated 8 months ago
- 🔍A cutting edge context aware GraphQL API fuzzing tool!☆151Updated last month
- This terraform provider can be used to get remote code execution by injecting a dummy resource in a writeable state file.☆58Updated 9 months ago
- A tool for secrets management, encryption as a service, and privileged access management☆14Updated 3 months ago