A starter secure code review checklist
☆184Nov 26, 2018Updated 7 years ago
Alternatives and similar repositories for secure-code-review-checklist
Users that are interested in secure-code-review-checklist are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆196Feb 26, 2023Updated 3 years ago
- My personal collection of resources (mostly tools and training materials) for source code security audits.☆111Aug 20, 2024Updated 2 years ago
- Regex patterns for manual application source code review☆36Dec 14, 2020Updated 5 years ago
- Megagrep helps beginning a code review by searching for keywords in the code using "grep". It does not search for vulnerabilities directl…☆14Aug 21, 2026Updated 2 months ago
- Repository for public artifacts related to the practice of secure code review☆12Nov 13, 2019Updated 6 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Automatic tool using for crawling code to find low-hang fruit vulnerabilities - Based on OWASP Secure Code Review Guide☆21Aug 31, 2020Updated 6 years ago
- GetSimple CMS Custom JS Plugin Exploit RCE Chain☆11Mar 8, 2023Updated 3 years ago
- ☆48Oct 22, 2024Updated 2 years ago
- OWASP Web Application Security Testing Checklist☆2,222Aug 18, 2022Updated 4 years ago
- ☆11Jan 27, 2022Updated 4 years ago
- A sample of "bad" code to review with interview candidates.☆12Oct 10, 2020Updated 6 years ago
- Labs from our workshop "Demystifying the server-side".☆18May 30, 2022Updated 4 years ago
- Learning source code review, spot vulnerability, find some ways how to fix it.☆29Nov 17, 2022Updated 3 years ago
- my nuclei templates #new☆10Jun 24, 2024Updated 2 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Basic c2-matrix analysis enviroment using Suricata + Wazuh + Elastic stack☆13Apr 18, 2020Updated 6 years ago
- This will assist you in the finding of potentially vulnerable PHP code. Each type of grep command is categorized in the type of vulnerabi…☆359Mar 6, 2025Updated last year
- ☆15Apr 21, 2021Updated 5 years ago
- Journey to conquer the OSCP!☆13Apr 18, 2019Updated 7 years ago
- A list of threat sinks used in the manual security source code review for application security☆76May 9, 2023Updated 3 years ago
- Perl wrapper for the capstone library☆14Mar 7, 2017Updated 9 years ago
- Tarpit - A Web application seeded with vulnerabilities, rootkits, backdoors & data leaks☆84Jul 21, 2022Updated 4 years ago
- Start writing (and keeping) JavaScript Promises today.☆12Mar 18, 2022Updated 4 years ago
- An actively maintained, Self curated notes related to android application security for security professionals, bugbounty hunters, pentes…☆229Aug 26, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exh…☆690Aug 7, 2020Updated 6 years ago
- Bug Bounty Program Discovery tool, that discovers bug Bounty Program via security.txt file by default and you can use custom dork☆15Jul 17, 2022Updated 4 years ago
- Zed Attack Proxy Scripts for finding CVEs and Secrets.☆126Jun 2, 2022Updated 4 years ago
- OSWE Preparation☆690Jul 25, 2022Updated 4 years ago
- The Secure Coding Dojo is a platform for delivering secure coding knowledge.☆613Nov 23, 2025Updated 11 months ago
- Security checks for http headers and cookies☆27Feb 11, 2021Updated 5 years ago
- BurpSiute - BurpBounty Profiles☆20Feb 10, 2023Updated 3 years ago
- jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()…☆11Apr 9, 2021Updated 5 years ago
- This repository will serve as the "master" repo containing all trainings and tutorials done in preperation for OSWE in conjunction with t…☆949Jan 6, 2025Updated last year
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Welcome to the secure code review snippets for secure code review snippets! This repository aims to provide developers with valuable exam…☆15Feb 19, 2025Updated last year
- grep rough audit - source code auditing tool☆1,692Oct 13, 2026Updated 2 weeks ago
- ☆142Jul 9, 2021Updated 5 years ago
- Accompanying material needed for the workshop☆11Jun 14, 2023Updated 3 years ago
- Most of the Google Acquisitions for Bug Bounty Hunter.☆67Sep 3, 2022Updated 4 years ago
- Example of a vulnerable NodeJS+Express+MySQL service☆20Jan 17, 2023Updated 3 years ago
- Maturity Model Collaborative project☆15Feb 27, 2023Updated 3 years ago