trailofbits / testing-handbookLinks
Trail of Bits Testing Handbook
☆79Updated last month
Alternatives and similar repositories for testing-handbook
Users that are interested in testing-handbook are comparing it to the libraries listed below
Sorting:
- Manager of third-party sources of Semgrep rules 🗂☆87Updated last year
- 🔍A cutting edge context aware GraphQL API fuzzing tool!☆148Updated 2 weeks ago
- CodeQL queries developed by Trail of Bits☆118Updated this week
- A coverage-guided REST API fuzzer developed on top of LibAFL☆127Updated this week
- SAST + LLM Interprocedural Context Extractor☆103Updated 3 weeks ago
- Create notes during a security code review in VSCode 📝 Import your favorite SAST tool findings 🛠️ and collaborate with others 🤝☆137Updated 5 months ago
- atom is a novel intermediate representation for applications and a standalone tool that is powered by chen.☆72Updated 2 weeks ago
- CQ, a code security scanner☆100Updated last year
- ☆48Updated last year
- 🧪 Correlate Semgrep scans with Python test coverage to prioritize SAST findings and get bug fix suggestions via a self-hosted LLM.☆40Updated 9 months ago
- Automated vulnerability discovery and annotation☆67Updated last year
- A very simple open source implementation of Google's Project Naptime☆169Updated 5 months ago
- SARIF Explorer: A VSCode extension that helps you visualize and triage static analysis results☆33Updated last month
- Resources for Browser Security Research☆44Updated 2 years ago
- boostsecurityio/lotp☆133Updated 5 months ago
- ☆79Updated last year
- Create code bookmarks and code highlights with a click.☆213Updated 2 weeks ago
- Automatically fuzz Rust projects from scratch☆57Updated 2 months ago
- The IoT Security Testing Guide (ISTG) provides a comprehensive methodology for penetration tests in the IoT field, offering flexibility t…☆111Updated last month
- A structure-aware HTTP fuzzing library☆214Updated 9 months ago
- ☆116Updated 2 years ago
- An experimental project exploring the use of Large Language Models (LLMs) to solve HackTheBox machines autonomously.☆61Updated last week
- A curated list of awesome browser security learning material.☆144Updated 2 years ago
- A collection of Semgrep rules which followed security guidelines for .NET and Java.☆23Updated 3 years ago
- PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagrams☆105Updated 7 months ago
- A curated list of VULNERABLE APPS and SYSTEMS which can be used as PENETRATION TESTING PRACTICE LAB.☆40Updated 2 years ago
- Data about all known supply-chain attacks through history☆60Updated 3 months ago
- Search engine for CTF writeups with instant results.☆149Updated 6 months ago
- Golem automates C/C++ vulnerability discovery with SemGrep+LLVM+LLM☆91Updated 2 months ago
- Coverage-Guided Greybox Distributed Fuzzer☆131Updated 4 months ago