Semgrep rules corresponding to the OWASP ASVS standard
☆27Nov 2, 2020Updated 5 years ago
Alternatives and similar repositories for rules-owasp-asvs
Users that are interested in rules-owasp-asvs are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ZAP scripts to implement ASVS L1 checking☆17Apr 28, 2022Updated 4 years ago
- Burp extension to find and decode BigIP and Netscaler cookies☆15Jul 20, 2018Updated 8 years ago
- Custom semgrep rules registry☆14Aug 23, 2022Updated 3 years ago
- Use ORT in your GitLab pipelines☆16Nov 11, 2025Updated 8 months ago
- ☆126Nov 8, 2023Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- My custom semgrep rules☆24Sep 13, 2020Updated 5 years ago
- 🖇️ equivalence table between OWASP ASVS standard and STRIDE threat modeling methodology.☆76Aug 22, 2024Updated last year
- HashiCorp-relevant rules for the Semgrep code analysis tool☆42Oct 3, 2023Updated 2 years ago
- A collection of permissively licensed Semgrep rules.☆25Jul 5, 2024Updated 2 years ago
- My collection of Cloud Security Resources☆16Apr 16, 2025Updated last year
- A ZAPROXY Add-on that allows testing of web application vulnerabilities by recording complex multi-step sequences. You can test applica…☆23May 14, 2025Updated last year
- ☆19Jul 9, 2022Updated 4 years ago
- Challenges for the TheManyHatsClub CTF☆11May 1, 2023Updated 3 years ago
- a ZAPROXY Addon ActiveScan for detecting SQL injection with more better way.☆19Jun 7, 2026Updated last month
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Using censys to find subdomains but without the APIs just scrapping☆16May 13, 2020Updated 6 years ago
- ☆14Jan 29, 2026Updated 5 months ago
- Extract credentials from lsass remotely☆16Jan 3, 2020Updated 6 years ago
- ☆39Mar 8, 2022Updated 4 years ago
- ☆18Apr 21, 2020Updated 6 years ago
- Semgrep queries developed by Trail of Bits.☆514May 7, 2026Updated 2 months ago
- LFI/RFI Payload Tests Project☆37Oct 21, 2019Updated 6 years ago
- Repository with research related to Android☆13Jul 17, 2018Updated 8 years ago
- Materials for the BSides NoVA/Charleston 2018 Bro Workshop☆14Jun 4, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- The Open Security Summit is focused on the collaboration between, Developers and Application Security☆45Jul 9, 2025Updated last year
- WAF Cookie Fetcher is a Burp Suite extension written in Python, which uses a headless browser to obtain the values of WAF-injected cookie…☆16Jan 16, 2018Updated 8 years ago
- Growing list of potentially dangerous PHP functions☆52May 1, 2019Updated 7 years ago
- File transfer app that uses the magic wormhole protocol☆11Oct 11, 2022Updated 3 years ago
- Simple script for testing CVE-2016-2402 and similar flaws☆13Mar 30, 2016Updated 10 years ago
- Container Security and Serverless Training☆13Dec 8, 2022Updated 3 years ago
- Bypass Constrained Language Mode in PowerShell☆29May 21, 2019Updated 7 years ago
- Sandbox to test Vue.js integration in MediaWiki☆13Dec 10, 2022Updated 3 years ago
- Plugins for the Serpico Project☆23Dec 4, 2018Updated 7 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Automating SQL injection using Burp Proxy Logs and SQLMap☆27Jul 6, 2012Updated 14 years ago
- ☆10Oct 31, 2021Updated 4 years ago
- commands☆27Nov 5, 2020Updated 5 years ago
- A tool for Pentesters & BugHunters to collect IPs of company, server, Operating System & many more☆13Dec 20, 2022Updated 3 years ago
- Tree traversal and transform functions☆12Jun 7, 2015Updated 11 years ago
- Small program to run requests against a web server and look for problems☆11Jan 20, 2016Updated 10 years ago
- collection of helper tools for fuzzing☆17Oct 3, 2023Updated 2 years ago