Testability Pattern Catalogs for SAST
☆37Feb 18, 2025Updated last year
Alternatives and similar repositories for sast-testability-patterns
Users that are interested in sast-testability-patterns are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- TP-Framework: Testability Pattern Framework for SAST☆18May 10, 2024Updated 2 years ago
- Testability Tarpits: the Impact of Code Patterns on the Security Testing of Web Applications (NDSS 2022)☆27Feb 14, 2024Updated 2 years ago
- YuraScanner☆87Feb 13, 2025Updated last year
- TheThing: an open-source tool to detect DOM Clobbering vulnerabilities☆57Oct 25, 2023Updated 3 years ago
- Stats about HTTP response security headers usage mentioned by the OSHP.☆16Jan 25, 2026Updated 9 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Search for top security papers with one click! Visit https://lzher.github.io/security-paper-db/☆14Jul 17, 2026Updated 3 months ago
- Parser utility to generate ASTs from PHP source code suitable to be processed by Joern.☆37Apr 21, 2020Updated 6 years ago
- ☆32May 1, 2025Updated last year
- A grey-box web application Fuzzer☆28Aug 16, 2024Updated 2 years ago
- A CLI wrapper for libmodsecurity (v3.0.10)☆13Nov 22, 2023Updated 2 years ago
- Scripting Assembly Language☆12Sep 2, 2015Updated 11 years ago
- A benchmark to evaluate taint analysis☆28Jun 20, 2022Updated 4 years ago
- A framework for the detection of COSI vulnerabilities / XS-Leaks☆14Mar 29, 2023Updated 3 years ago
- DOMFortify turns on Trusted Types for a page and quietly takes over the browser's default policy, so that old, vulnerable HTML sinks get …☆23Updated this week
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Benchmark collection for analysis. The idea is to have a collection of projects in several languages as well as various sast applications…☆12Jan 7, 2021Updated 5 years ago
- Symbolic execution inspired PHP application scanner for code-path discovery☆34May 2, 2019Updated 7 years ago
- FUGIO: Automatic Exploit Generation for PHP Object Injection Vulnerabilities☆99Nov 27, 2023Updated 2 years ago
- Artifacts of the paper "Arcanum: Detecting and Evaluating the Privacy Risks of Browser Extensions on Web Pages and Web Content" in USENIX…☆20Aug 9, 2024Updated 2 years ago
- Indicators of Attack Failure: Debugging and Improving Optimization of Adversarial Examples☆19May 23, 2022Updated 4 years ago
- An SMT Solver for string constraints☆56Oct 18, 2026Updated last week
- The Ultimate File Upload Bypass Generator☆14Nov 24, 2025Updated 11 months ago
- A web browser with dynamic data-flow tracking enabled in the Javascript engine and DOM, based on Mozilla Firefox (https://github.com/mozi…☆183Updated this week
- OWASP WAP - Web Application Protection Project☆10Jul 24, 2019Updated 7 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- ☆16Aug 1, 2025Updated last year
- Protect your PHP project from deserialization attacks! As seen on NDSS 2024☆15Aug 8, 2025Updated last year
- ☆13Oct 30, 2024Updated last year
- Effective ReDoS Detection by Principled Vulnerability Modeling and Exploit Generation☆15Jul 24, 2025Updated last year
- Headers Burp Extension☆21Jun 7, 2023Updated 3 years ago
- Collection of vulnerable and fixed PHP synthetic test cases☆67Oct 15, 2023Updated 3 years ago
- Default query sets for Joern☆27Oct 23, 2021Updated 5 years ago
- ☆15Jun 22, 2026Updated 4 months ago
- Tai-e的Web插件☆22Jun 11, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆23Apr 6, 2019Updated 7 years ago
- ☆15Jul 11, 2018Updated 8 years ago
- A collection of various scripts and automations to simplify Checkmarx SAST and IAST setup and use☆14Aug 30, 2018Updated 8 years ago
- A benchmark for Java gadget chain detecting algorithms.☆18Jun 20, 2025Updated last year
- VFCFinder: Searching for the Missing Vulnerability Fixing Commits☆31Dec 1, 2023Updated 2 years ago
- Code audit (code review) with VIM.☆17Jan 3, 2025Updated last year
- ☆14Feb 4, 2020Updated 6 years ago