semgrep / semgrep-docs
Documentation of Semgrep: a fast, open-source, static analysis tool.
β39Updated this week
Alternatives and similar repositories for semgrep-docs:
Users that are interested in semgrep-docs are comparing it to the libraries listed below
- Maturity Model Collaborative projectβ14Updated last year
- Manager of third-party sources of Semgrep rules πβ78Updated 6 months ago
- Paper, data and code from Investigating Potential Security Vulnerability Manifestation through Various Analyses & Inferences Regarding Inβ¦β18Updated 4 years ago
- Burp Suite Enterprise Edition Power Toolsβ16Updated 5 months ago
- The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parametersβ14Updated 2 years ago
- Scripts for Sourcegraph search results. Useful for static analysis <3β25Updated last year
- AWS Security Checksβ36Updated 7 years ago
- Example repository for GitHub Actions Time of Check to Time of Use (TOCTOU vulnerabilities)β22Updated 7 months ago
- Kubernetes Security Testing Guideβ26Updated 9 months ago
- Jekyll Files for cloudsecwiki.comβ50Updated 3 years ago
- A Burp plugin to export findings to DefectDojoβ30Updated last year
- A tool to run nmap against each line in a script.β17Updated 4 years ago
- β58Updated last year
- ZAP Management Scriptsβ21Updated last week
- Proof-of-concept code for research into GitHub Actions Cache poisoning.β21Updated last month
- A collection of my Semgrep rulesβ48Updated last year
- β50Updated 3 years ago
- multiple password 'asher using Pythonβs hashlibβ14Updated 3 years ago
- Fork of https://github.com/PortSwigger/param-miner for header smuggling researchβ12Updated 3 years ago
- Anti-Takeover is a sub domain monitoring tool for (blue/purple) team / internal security team which uses cloud flare. Currently Anti-Takeβ¦β12Updated 4 years ago
- Dependency Combobulatorβ89Updated last year
- Salesforce Policy Deviation Checkerβ30Updated 4 years ago
- insject is a tool for poking at containers. It enables you to run an arbitrary command in a container or any mix of Linux namespaces.β49Updated 3 years ago
- β33Updated 4 years ago
- A wrapper around jq, to help you parse jq output!β30Updated 4 years ago
- Nuclei plugins to audit Chrome extensionsβ64Updated 6 months ago
- A community collection of security reviews of open source software components.β93Updated 11 months ago
- FastCVE - fast, rich and API-based search for CVE and more (CPE, CWE, CAPEC)β41Updated 2 weeks ago
- β23Updated 11 months ago
- Quick WAF "paranoid" Doctor Evaluation | WAFPARAN01D3 Toolβ25Updated 3 years ago