Alternatives and similar repositories for semgrep-rules

Users that are interested in semgrep-rules are comparing it to the libraries listed below

• nccgroup / cowcloud
  ☆60Updated 2 years ago
• doyensec / oidc-ssrf
  An Evil OIDC Server
  ☆54Updated 3 years ago
• morganc3 / KOAuth
  OAuth 2.0 Dynamic Security Scanner
  ☆33Updated 4 years ago
• nodyhub / zipslipper
  Create tar/zip archives that try to exploit zipslip vulnerability.
  ☆48Updated last year
• 5f0ne / pdf-examiner
  Provides an overview of the inner file structure of a PDF
  ☆25Updated 3 years ago
• trufflesecurity / WhoAmISlack
  Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.
  ☆42Updated 2 years ago
• pentagridsec / archive_pwn
  A Python-based tool to create zip, tar and cpio archives to exploit common archive library issues and developer mistakes
  ☆43Updated 2 months ago
• federicodotta / semgrep-rules
  A collection of my Semgrep rules
  ☆51Updated 2 years ago
• intrudir / burpcollaborator-docker
  A set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard certificate in as simple a p…
  ☆30Updated 2 months ago
• ProZachJ / ducktales
  Python's handling of NaN is....interesting?broken?...this project illustrates the issue
  ☆13Updated 4 years ago
• hac01 / gcp-iam-brute
  ☆51Updated last year
• nccgroup / cq
  ☆116Updated 2 years ago
• synacktiv / gh-hijack-runner
  A python script to create a fake GitHub runner and hijack pipeline jobs to leak CI/CD secrets.
  ☆27Updated last year
• nccgroup / ccs
  ☆114Updated 2 years ago
• shivsahni / NSDetect
  ☆24Updated 3 years ago
• Outpost24 / outpost24-cors-check
  Additional active scan checks for BURP
  ☆28Updated last year
• messypoutine / gravy-overflow
  A GitHub Actions Supply Chain CTF / Goat
  ☆27Updated last month
• chensokolovsky / iosEnv
  docker env for ios research on a mac host
  ☆27Updated 8 months ago
• 0xdevalias / gopherblazer
  PoC's and Slides from 'Gophers, whales and.. clouds? Oh my!' BSides Wellington presentation by Glenn 'devalias' Grant
  ☆17Updated 7 years ago
• ashirt-ops / ashirt-deployments
  Deployment code for ashirt-server
  ☆20Updated 3 months ago
• aaron-costello / ServiceNow-Schema
  A shortlist of core ServiceNow tables.
  ☆15Updated 2 years ago
• denniskniep / interactsh_deploy
  Interactsh deployment to AWS EC2 Instance with Terraform
  ☆11Updated 4 years ago
• airman604 / cms2cmd
  ☆10Updated 7 years ago
• PortSwigger / attack-surface-detector
  The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters
  ☆14Updated 4 years ago
• semgrep / semgrep-docs
  Documentation of Semgrep: a fast, open-source, static analysis tool.
  ☆48Updated this week
• spaceraccoon / vulnerability-spoiler-alert-action
  GitHub Action to alert on security patches before the CVE drops.
  ☆34Updated this week
• t0xodile / the-single-packet-shovel
  ☆21Updated 5 months ago
• nccgroup / SFPolDevChk
  Salesforce Policy Deviation Checker
  ☆30Updated 5 years ago
• asaurusrex / MachoBins
  ☆15Updated 3 years ago
• AdnaneKhan / ActionsCacheBlasting
  Proof-of-concept code for research into GitHub Actions Cache poisoning.
  ☆21Updated 11 months ago