Alternatives and similar repositories for snyk-code-review-exercise

Users that are interested in snyk-code-review-exercise are comparing it to the libraries listed below

• s0rcy / semgrep-rules
  Collection of Semgrep rules for security analysis
  ☆10Updated last year
• nccgroup / cowcloud
  ☆58Updated 2 years ago
• JOSHUAJEBARAJ / GCP-GOAT
  GCP GOAT is the vulnerable application for learn the GCP Security
  ☆64Updated 2 months ago
• messypoutine / gravy-overflow
  A GitHub Actions Supply Chain CTF / Goat
  ☆22Updated 2 weeks ago
• trufflesecurity / WhoAmISlack
  Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.
  ☆42Updated last year
• nccgroup / SFPolDevChk
  Salesforce Policy Deviation Checker
  ☆30Updated 4 years ago
• airman604 / cms2cmd
  ☆10Updated 6 years ago
• padok-team / cognito-scanner
  A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
  ☆108Updated last year
• tenable / hidden-services-revealer
  ☆37Updated last year
• dagheyman / awesome-product-security
  📚A curated list of product security resources.
  ☆20Updated 2 months ago
• shivsahni / NSDetect
  ☆23Updated 3 years ago
• doyensec / cloudsec-tidbits
  Blogpost series showcasing interesting cloud - web app security bugs
  ☆49Updated 2 years ago
• Frichetten / aws_api_shapeshifter
  A small library to alter AWS API requests; Used for fuzzing research
  ☆22Updated last year
• sebastian-mora / awsssome_phish
  AWS SSO serverless phishing API.
  ☆32Updated 4 years ago
• P3tra-WP / Jupyter-Threat
  ☆14Updated 2 years ago
• ivision-research / vulnerable-graphql-api
  A very vulnerable implementation of a GraphQL API.
  ☆61Updated 3 years ago
• ProZachJ / ducktales
  Python's handling of NaN is....interesting?broken?...this project illustrates the issue
  ☆13Updated 3 years ago
• morganc3 / KOAuth
  OAuth 2.0 Dynamic Security Scanner
  ☆33Updated 4 years ago
• avishayil / cdk-goat
  Vulnerable by Design AWS Cloud Development Kit (CDK) Infrastructure
  ☆47Updated last year
• doyensec / oidc-ssrf
  An Evil OIDC Server
  ☆53Updated 2 years ago
• HarshVaragiya / aws-redteam-kit
  A PoC to Simulate Ransomware Attack on AWS Environment
  ☆32Updated 9 months ago
• offensive-terraform / terraform-aws-ebs-snapshot-publicly-exposed
  Offensive Terraform module which copies publicly exposed EBS snapshot to us-east-1 region in attacker's AWS account and creates EBS volum…
  ☆15Updated 4 years ago
• modulexcite / attacking-and-auditing-docker-containers-and-kubernetes-clusters
  Appsecco training course content on Attacking and Auditing Dockers Containers and Kubernetes Clusters
  ☆14Updated 5 years ago
• semgrep / semgrep-docs
  Documentation of Semgrep: a fast, open-source, static analysis tool.
  ☆42Updated this week
• ncc-erik-steringer / Aerides
  An implementation of infrastructure-as-code scanning using dynamic tooling.
  ☆56Updated 3 years ago
• antitree / go-pillage-registries
  Pentester-focused Docker registry tool to enumerate and pull images
  ☆24Updated last week
• nccgroup / s3_objects_check
  Whitebox evaluation of effective S3 object permissions, to identify publicly accessible files.
  ☆77Updated 3 years ago
• trufflesecurity / EmailGraffiti
  Vandalize old emails. Like an NFT that's easy to prove ownership of.
  ☆35Updated 2 years ago
• ghostsecurityarchive / waf-btk
  WAF bypass PoC
  ☆48Updated last year
• nccgroup / ConMachi
  Container Blackbox Security Auditing Tool: enumerates security configuration from within the target container
  ☆106Updated 6 years ago