Alternatives and similar repositories for semgrep-rules

Users that are interested in semgrep-rules are comparing it to the libraries listed below

• doyensec / oidc-ssrf
  An Evil OIDC Server
  ☆54Updated 3 years ago
• aaron-costello / ServiceNow-Schema
  A shortlist of core ServiceNow tables.
  ☆15Updated 2 years ago
• pentagridsec / archive_pwn
  A Python-based tool to create zip, tar and cpio archives to exploit common archive library issues and developer mistakes
  ☆43Updated 2 months ago
• morganc3 / KOAuth
  OAuth 2.0 Dynamic Security Scanner
  ☆33Updated 4 years ago
• ProZachJ / ducktales
  Python's handling of NaN is....interesting?broken?...this project illustrates the issue
  ☆13Updated 4 years ago
• nccgroup / cowcloud
  ☆60Updated 2 years ago
• chensokolovsky / iosEnv
  docker env for ios research on a mac host
  ☆26Updated 7 months ago
• 5f0ne / pdf-examiner
  Provides an overview of the inner file structure of a PDF
  ☆25Updated 3 years ago
• intrudir / burpcollaborator-docker
  A set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard certificate in as simple a p…
  ☆30Updated 2 months ago
• nodyhub / zipslipper
  Create tar/zip archives that try to exploit zipslip vulnerability.
  ☆48Updated last year
• airman604 / cms2cmd
  ☆10Updated 7 years ago
• denniskniep / interactsh_deploy
  Interactsh deployment to AWS EC2 Instance with Terraform
  ☆11Updated 4 years ago
• SonarSource / argument-injection-vectors
  A curated list of argument injection vectors
  ☆41Updated last year
• federicodotta / semgrep-rules
  A collection of my Semgrep rules
  ☆51Updated 2 years ago
• trufflesecurity / WhoAmISlack
  Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.
  ☆42Updated 2 years ago
• AdnaneKhan / ActionsCacheBlasting
  Proof-of-concept code for research into GitHub Actions Cache poisoning.
  ☆21Updated 10 months ago
• alt3kx / wafparan01d3
  Quick WAF "paranoid" Doctor Evaluation | WAFPARAN01D3 Tool
  ☆24Updated 4 years ago
• Outpost24 / outpost24-cors-check
  Additional active scan checks for BURP
  ☆28Updated last year
• shivsahni / NSDetect
  ☆24Updated 3 years ago
• honoki / bbrf-agents
  A collection of BBRF agents that can be deployed to AWS lambda
  ☆24Updated last year
• nightwatchcybersecurity / gitbleed_tools
  ☆90Updated 3 years ago
• nccgroup / RFC-Security-Research
  Paper, data and code from Investigating Potential Security Vulnerability Manifestation through Various Analyses & Inferences Regarding In…
  ☆19Updated 5 years ago
• AnubisSec / GroovyWaiter
  ☆17Updated 3 years ago
• spaceraccoon / serverless-recon-example
  Example of a serverless web reconaissance workflow's AWS architecture.
  ☆11Updated 2 years ago
• nccgroup / SFPolDevChk
  Salesforce Policy Deviation Checker
  ☆30Updated 5 years ago
• cedowens / Helpful_aws-scripts
  python3 scripts to help with aws triage needs
  ☆15Updated 3 years ago
• hac01 / gcp-iam-brute
  ☆50Updated last year
• leesoh / np
  A tool to parse, deduplicate, and query multiple port scans.
  ☆58Updated 2 years ago
• PortSwigger / attack-surface-detector
  The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters
  ☆14Updated 3 years ago
• Static-Flow / DirectoryImporter
  This is a Burpsuite plugin built to enable you to import your directory bruteforcing results into burp for easy viewing later. This is an…
  ☆36Updated 2 years ago