Alternatives and similar repositories for semgrep-rules

Users that are interested in semgrep-rules are comparing it to the libraries listed below

• doyensec / oidc-ssrf
  An Evil OIDC Server
  ☆53Updated 2 years ago
• morganc3 / KOAuth
  OAuth 2.0 Dynamic Security Scanner
  ☆33Updated 4 years ago
• ProZachJ / ducktales
  Python's handling of NaN is....interesting?broken?...this project illustrates the issue
  ☆13Updated 3 years ago
• nccgroup / cowcloud
  ☆57Updated 2 years ago
• aaron-costello / ServiceNow-Schema
  A shortlist of core ServiceNow tables.
  ☆14Updated last year
• pentagridsec / archive_pwn
  A Python-based tool to create zip, tar and cpio archives to exploit common archive library issues and developer mistakes
  ☆43Updated last year
• SonarSource / argument-injection-vectors
  A curated list of argument injection vectors
  ☆41Updated 5 months ago
• AdnaneKhan / ActionsCacheBlasting
  Proof-of-concept code for research into GitHub Actions Cache poisoning.
  ☆21Updated 4 months ago
• intrudir / burpcollaborator-docker
  A set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard certificate in as simple a p…
  ☆30Updated 5 months ago
• 5f0ne / pdf-examiner
  Provides an overview of the inner file structure of a PDF
  ☆25Updated 2 years ago
• 0xdevalias / gopherblazer
  PoC's and Slides from 'Gophers, whales and.. clouds? Oh my!' BSides Wellington presentation by Glenn 'devalias' Grant
  ☆16Updated 7 years ago
• Outpost24 / outpost24-cors-check
  Additional active scan checks for BURP
  ☆27Updated 9 months ago
• alt3kx / wafparan01d3
  Quick WAF "paranoid" Doctor Evaluation | WAFPARAN01D3 Tool
  ☆25Updated 3 years ago
• AnubisSec / GroovyWaiter
  ☆17Updated 3 years ago
• airman604 / cms2cmd
  ☆10Updated 6 years ago
• NodyHub / zipslipper
  Create tar/zip archives that try to exploit zipslip vulnerability.
  ☆47Updated 9 months ago
• ashirt-ops / ashirt-deployments
  Deployment code for ashirt-server
  ☆19Updated last year
• t0xodile / the-single-packet-shovel
  ☆21Updated last month
• trufflesecurity / WhoAmISlack
  Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.
  ☆42Updated last year
• NetSPI / AWSSigner
  Burp Extension for AWS Signing
  ☆89Updated 6 months ago
• denniskniep / interactsh_deploy
  Interactsh deployment to AWS EC2 Instance with Terraform
  ☆12Updated 3 years ago
• pocahon / jsontoneo
  ☆12Updated 3 months ago
• shivsahni / NSDetect
  ☆23Updated 2 years ago
• akabe1 / akabe1-semgrep-rules
  My collection of Semgrep rules for vulnerability detection on source code (swift, java, cobol)
  ☆34Updated last week
• Static-Flow / BurpRequestCleaner
  This extension redacts potentially sensitive header and parameter values from requests using Shannon Entropy analysis.
  ☆12Updated 4 years ago
• intrigueio / intrigue-ident
  Application and Service Fingerprinting
  ☆133Updated 2 years ago
• synacktiv / DepFuzzer
  ☆64Updated 2 months ago
• Static-Flow / DirectoryImporter
  This is a Burpsuite plugin built to enable you to import your directory bruteforcing results into burp for easy viewing later. This is an…
  ☆36Updated 2 years ago
• nightwatchcybersecurity / gitbleed_tools
  ☆90Updated 3 years ago
• CounterHack / mandrake
  A rust utility for instrumenting binaries, used in Holiday Hack Challenge 2021
  ☆27Updated 3 years ago