Alternatives and similar repositories for semgrep-rules

Users that are interested in semgrep-rules are comparing it to the libraries listed below

• doyensec / oidc-ssrf
  An Evil OIDC Server
  ☆53Updated 2 years ago
• aaron-costello / ServiceNow-Schema
  A shortlist of core ServiceNow tables.
  ☆14Updated last year
• federicodotta / semgrep-rules
  A collection of my Semgrep rules
  ☆49Updated 2 years ago
• 5f0ne / pdf-examiner
  Provides an overview of the inner file structure of a PDF
  ☆25Updated 2 years ago
• halencarjunior / sss3
  Simple S3 Bucket Testing Software
  ☆31Updated 3 years ago
• ProZachJ / ducktales
  Python's handling of NaN is....interesting?broken?...this project illustrates the issue
  ☆13Updated 3 years ago
• morganc3 / KOAuth
  OAuth 2.0 Dynamic Security Scanner
  ☆33Updated 4 years ago
• airman604 / cms2cmd
  ☆10Updated 6 years ago
• pentagridsec / archive_pwn
  A Python-based tool to create zip, tar and cpio archives to exploit common archive library issues and developer mistakes
  ☆43Updated last year
• nodyhub / zipslipper
  Create tar/zip archives that try to exploit zipslip vulnerability.
  ☆47Updated 11 months ago
• nccgroup / cowcloud
  ☆59Updated 2 years ago
• JupiterOne-Archives / j1nuclei
  ☆14Updated last year
• nccgroup / RFC-Security-Research
  Paper, data and code from Investigating Potential Security Vulnerability Manifestation through Various Analyses & Inferences Regarding In…
  ☆18Updated 4 years ago
• nightwatchcybersecurity / gitbleed_tools
  ☆90Updated 3 years ago
• SonarSource / argument-injection-vectors
  A curated list of argument injection vectors
  ☆41Updated 6 months ago
• PortSwigger / attack-surface-detector
  The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters
  ☆14Updated 3 years ago
• shivsahni / NSDetect
  ☆23Updated 3 years ago
• denniskniep / interactsh_deploy
  Interactsh deployment to AWS EC2 Instance with Terraform
  ☆12Updated 3 years ago
• trufflesecurity / WhoAmISlack
  Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.
  ☆42Updated last year
• qkaiser / cottontail
  Capture all RabbitMQ messages being sent through a broker.
  ☆32Updated 4 years ago
• nccgroup / HTTPSignatures
  A Burp Suite extension implementing the Signing HTTP Messages draft-ietf-httpbis-message-signatures-01 draft.
  ☆41Updated 3 years ago
• alt3kx / wafparan01d3
  Quick WAF "paranoid" Doctor Evaluation | WAFPARAN01D3 Tool
  ☆25Updated 3 years ago
• CounterHack / mandrake
  A rust utility for instrumenting binaries, used in Holiday Hack Challenge 2021
  ☆27Updated 3 years ago
• intrudir / burpcollaborator-docker
  A set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard certificate in as simple a p…
  ☆30Updated 7 months ago
• ShadowHatesYou / whori.sh
  Zone transfers for rwhois
  ☆20Updated 6 years ago
• kelbyludwig / saml-attack-surface
  ☆29Updated 8 years ago
• ashirt-ops / ashirt-deployments
  Deployment code for ashirt-server
  ☆20Updated last year
• Static-Flow / DirectoryImporter
  This is a Burpsuite plugin built to enable you to import your directory bruteforcing results into burp for easy viewing later. This is an…
  ☆36Updated 2 years ago
• Outpost24 / outpost24-cors-check
  Additional active scan checks for BURP
  ☆28Updated 10 months ago
• AdnaneKhan / ActionsCacheBlasting
  Proof-of-concept code for research into GitHub Actions Cache poisoning.
  ☆21Updated 5 months ago