Alternatives and similar repositories for semgrep-rules

Users that are interested in semgrep-rules are comparing it to the libraries listed below

• morganc3 / KOAuth
  OAuth 2.0 Dynamic Security Scanner
  ☆33Updated 4 years ago
• aaron-costello / ServiceNow-Schema
  A shortlist of core ServiceNow tables.
  ☆14Updated 2 years ago
• nccgroup / cowcloud
  ☆60Updated 2 years ago
• doyensec / oidc-ssrf
  An Evil OIDC Server
  ☆54Updated 3 years ago
• denniskniep / interactsh_deploy
  Interactsh deployment to AWS EC2 Instance with Terraform
  ☆12Updated 3 years ago
• ProZachJ / ducktales
  Python's handling of NaN is....interesting?broken?...this project illustrates the issue
  ☆13Updated 3 years ago
• 5f0ne / pdf-examiner
  Provides an overview of the inner file structure of a PDF
  ☆25Updated 3 years ago
• t0xodile / the-single-packet-shovel
  ☆21Updated last month
• nodyhub / zipslipper
  Create tar/zip archives that try to exploit zipslip vulnerability.
  ☆48Updated last year
• alt3kx / wafparan01d3
  Quick WAF "paranoid" Doctor Evaluation | WAFPARAN01D3 Tool
  ☆24Updated 3 years ago
• pentagridsec / archive_pwn
  A Python-based tool to create zip, tar and cpio archives to exploit common archive library issues and developer mistakes
  ☆43Updated 2 years ago
• synacktiv / gh-hijack-runner
  A python script to create a fake GitHub runner and hijack pipeline jobs to leak CI/CD secrets.
  ☆27Updated last year
• justmobilesec / just-mobile-security-mobile-docker
  ☆25Updated last week
• intrudir / burpcollaborator-docker
  A set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard certificate in as simple a p…
  ☆30Updated 9 months ago
• federicodotta / semgrep-rules
  A collection of my Semgrep rules
  ☆51Updated 2 years ago
• messypoutine / gravy-overflow
  A GitHub Actions Supply Chain CTF / Goat
  ☆24Updated 2 weeks ago
• airman604 / cms2cmd
  ☆10Updated 6 years ago
• hac01 / gcp-iam-brute
  ☆50Updated last year
• Outpost24 / outpost24-cors-check
  Additional active scan checks for BURP
  ☆28Updated last year
• sensepost / depscanner
  Detect public repository dependencies in the GitHub repositories with an orphan required library.
  ☆20Updated 4 months ago
• nightwatchcybersecurity / gitbleed_tools
  ☆90Updated 3 years ago
• spaceraccoon / serverless-recon-example
  Example of a serverless web reconaissance workflow's AWS architecture.
  ☆11Updated 2 years ago
• halencarjunior / sss3
  Simple S3 Bucket Testing Software
  ☆31Updated 3 years ago
• trufflesecurity / WhoAmISlack
  Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.
  ☆42Updated last year
• ashirt-ops / ashirt-deployments
  Deployment code for ashirt-server
  ☆20Updated last week
• shivsahni / NSDetect
  ☆23Updated 3 years ago
• thelicato / fire
  Take domains on stdin and output them on stdout if they get resolved
  ☆33Updated 3 years ago
• asaurusrex / MachoBins
  ☆15Updated 3 years ago
• AnubisSec / GroovyWaiter
  ☆17Updated 3 years ago
• dozernz / bugstropics
  Supporting material for the "Hunting Bugs In The Tropics" DEFCON 30 talk
  ☆10Updated 3 years ago