Alternatives and similar repositories for semgrep-rules

Users that are interested in semgrep-rules are comparing it to the libraries listed below

• doyensec / oidc-ssrf
  An Evil OIDC Server
  ☆54Updated 3 years ago
• morganc3 / KOAuth
  OAuth 2.0 Dynamic Security Scanner
  ☆33Updated 4 years ago
• 5f0ne / pdf-examiner
  Provides an overview of the inner file structure of a PDF
  ☆25Updated 3 years ago
• ProZachJ / ducktales
  Python's handling of NaN is....interesting?broken?...this project illustrates the issue
  ☆13Updated 3 years ago
• aaron-costello / ServiceNow-Schema
  A shortlist of core ServiceNow tables.
  ☆15Updated 2 years ago
• nccgroup / cowcloud
  ☆60Updated 2 years ago
• federicodotta / semgrep-rules
  A collection of my Semgrep rules
  ☆50Updated 2 years ago
• halencarjunior / sss3
  Simple S3 Bucket Testing Software
  ☆31Updated 4 years ago
• nightwatchcybersecurity / gitbleed_tools
  ☆90Updated 3 years ago
• airman604 / cms2cmd
  ☆10Updated 7 years ago
• pentagridsec / archive_pwn
  A Python-based tool to create zip, tar and cpio archives to exploit common archive library issues and developer mistakes
  ☆43Updated 3 weeks ago
• alt3kx / wafparan01d3
  Quick WAF "paranoid" Doctor Evaluation | WAFPARAN01D3 Tool
  ☆24Updated 4 years ago
• denniskniep / interactsh_deploy
  Interactsh deployment to AWS EC2 Instance with Terraform
  ☆11Updated 3 years ago
• nodyhub / zipslipper
  Create tar/zip archives that try to exploit zipslip vulnerability.
  ☆48Updated last year
• synacktiv / gh-hijack-runner
  A python script to create a fake GitHub runner and hijack pipeline jobs to leak CI/CD secrets.
  ☆29Updated last year
• nccgroup / SFPolDevChk
  Salesforce Policy Deviation Checker
  ☆30Updated 5 years ago
• Outpost24 / outpost24-cors-check
  Additional active scan checks for BURP
  ☆28Updated last year
• shivsahni / NSDetect
  ☆23Updated 3 years ago
• ShadowHatesYou / whori.sh
  Zone transfers for rwhois
  ☆20Updated 6 years ago
• qkaiser / cottontail
  Capture all RabbitMQ messages being sent through a broker.
  ☆32Updated 4 years ago
• t0xodile / the-single-packet-shovel
  ☆21Updated 3 months ago
• Leoid / AWSBurpCollaborator
  Deploy a Private Burpsuite Collaborator using boto3 Python Library
  ☆58Updated 5 years ago
• dozernz / bugstropics
  Supporting material for the "Hunting Bugs In The Tropics" DEFCON 30 talk
  ☆10Updated 3 years ago
• cedowens / Helpful_aws-scripts
  python3 scripts to help with aws triage needs
  ☆15Updated 3 years ago
• thelicato / fire
  Take domains on stdin and output them on stdout if they get resolved
  ☆32Updated 3 years ago
• trufflesecurity / WhoAmISlack
  Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.
  ☆42Updated 2 years ago
• ashirt-ops / ashirt-deployments
  Deployment code for ashirt-server
  ☆20Updated 2 months ago
• hac01 / gcp-iam-brute
  ☆50Updated last year
• nccgroup / cq
  ☆116Updated 2 years ago
• PortSwigger / attack-surface-detector
  The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters
  ☆14Updated 3 years ago