Semgrep rules corresponding to the OWASP ASVS standard
☆27Nov 2, 2020Updated 5 years ago
Alternatives and similar repositories for rules-owasp-asvs
Users that are interested in rules-owasp-asvs are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ZAP scripts to implement ASVS L1 checking☆17Apr 28, 2022Updated 4 years ago
- Custom semgrep rules registry☆14Aug 23, 2022Updated 3 years ago
- Curated Collection of Popular Community Rules for Semgrep☆20Dec 27, 2023Updated 2 years ago
- Use ORT in your GitLab pipelines☆15Nov 11, 2025Updated 7 months ago
- ☆125Nov 8, 2023Updated 2 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- My custom semgrep rules☆23Sep 13, 2020Updated 5 years ago
- 🖇️ equivalence table between OWASP ASVS standard and STRIDE threat modeling methodology.☆76Aug 22, 2024Updated last year
- HashiCorp-relevant rules for the Semgrep code analysis tool☆42Oct 3, 2023Updated 2 years ago
- Rapid cybersecurity toolkit based on Elastic in Docker. Designed to quickly build elastic-based environments to analyze and execute threa…☆18Apr 10, 2020Updated 6 years ago
- A ZAPROXY Add-on that allows testing of web application vulnerabilities by recording complex multi-step sequences. You can test applica…☆22May 14, 2025Updated last year
- Semgrep Community Edition rules, maintained by Semgrep and the community. Free to use under the Semgrep Rules License.☆1,182Updated this week
- a ZAPROXY Addon ActiveScan for detecting SQL injection with more better way.☆18Jun 7, 2026Updated last week
- ☆19Jul 9, 2022Updated 3 years ago
- Extract credentials from lsass remotely☆16Jan 3, 2020Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Using censys to find subdomains but without the APIs just scrapping☆16May 13, 2020Updated 6 years ago
- OWASP ZAP add-on to detect reflected parameter vulnerabilities efficiently☆12Feb 19, 2021Updated 5 years ago
- ☆18Apr 21, 2020Updated 6 years ago
- ☆11Dec 19, 2024Updated last year
- Semgrep queries developed by Trail of Bits.☆514May 7, 2026Updated last month
- cheatsheets for life☆13Jan 22, 2026Updated 4 months ago
- GitLab CI security tools runner☆18Feb 3, 2023Updated 3 years ago
- ☆244Jun 3, 2026Updated last week
- ☆38Mar 8, 2022Updated 4 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- The Open Security Summit is focused on the collaboration between, Developers and Application Security☆45Jul 9, 2025Updated 11 months ago
- LFI/RFI Payload Tests Project☆37Oct 21, 2019Updated 6 years ago
- Simple script for testing CVE-2016-2402 and similar flaws☆13Mar 30, 2016Updated 10 years ago
- WAF Cookie Fetcher is a Burp Suite extension written in Python, which uses a headless browser to obtain the values of WAF-injected cookie…☆16Jan 16, 2018Updated 8 years ago
- Growing list of potentially dangerous PHP functions☆52May 1, 2019Updated 7 years ago
- Materials for the BSides NoVA/Charleston 2018 Bro Workshop☆14Jun 4, 2025Updated last year
- ☆11Jun 19, 2024Updated last year
- HTTP Proxy using Amazon Lambda for source IP cycling☆15Apr 6, 2021Updated 5 years ago
- Container Security and Serverless Training☆13Dec 8, 2022Updated 3 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Plugins for the Serpico Project☆23Dec 4, 2018Updated 7 years ago
- Bypass Constrained Language Mode in PowerShell☆30May 21, 2019Updated 7 years ago
- commands☆27Nov 5, 2020Updated 5 years ago
- Small program to run requests against a web server and look for problems☆11Jan 20, 2016Updated 10 years ago
- Massive NSE (Nmap Scripting Engine) AutoSploit and AutoScanner☆13Apr 25, 2018Updated 8 years ago
- A Burp Suite extension which performs checks for cross-domain scripting against the DOM, subresource integrity checks, and evaluates Java…☆27Mar 23, 2022Updated 4 years ago
- Bug Bounty Monitor☆15Nov 23, 2020Updated 5 years ago