My custom semgrep rules
☆24Sep 13, 2020Updated 6 years ago
Alternatives and similar repositories for semgrep-rules
Users that are interested in semgrep-rules are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Collection of rules for Static Application Security Testing (SAST) with Semgrep☆14Apr 16, 2025Updated last year
- A collection of Semgrep rules which followed security guidelines for .NET and Java.☆24Oct 4, 2021Updated 5 years ago
- Custom semgrep rules registry☆14Aug 23, 2022Updated 4 years ago
- My collection of Semgrep rules for vulnerability detection on source code (swift, java, cobol)☆44Dec 3, 2025Updated 10 months ago
- ☆14Jan 29, 2026Updated 9 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Curated Collection of Popular Community Rules for Semgrep☆23Dec 27, 2023Updated 2 years ago
- HashiCorp-relevant rules for the Semgrep code analysis tool☆42Oct 3, 2023Updated 3 years ago
- LLMs for autonomous generate rules☆12Apr 25, 2025Updated last year
- ☆246Updated this week
- I DOC VIEW RCE 的poc☆14Nov 23, 2023Updated 2 years ago
- Struts2_Vul_Debug☆10Jan 4, 2021Updated 5 years ago
- Java安全相关，目前主要是CC链研究☆10Sep 1, 2022Updated 4 years ago
- ☆10Jul 21, 2022Updated 4 years ago
- Semgrep rules specific to Frappe Framework☆68Sep 30, 2026Updated last month
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Welcome to the secure code review snippets for secure code review snippets! This repository aims to provide developers with valuable exam…☆15Feb 19, 2025Updated last year
- CVE-2022-22965 - CVE-2010-1622 redux☆19Apr 18, 2023Updated 3 years ago
- Automatic tool using for crawling code to find low-hang fruit vulnerabilities - Based on OWASP Secure Code Review Guide☆21Aug 31, 2020Updated 6 years ago
- ☆16Sep 4, 2025Updated last year
- Regex patterns for manual application source code review☆36Dec 14, 2020Updated 5 years ago
- Autogrep automates Semgrep rule generation and filtering by using LLMs to analyze vulnerability patches, enabling automatic creation of h…☆93Feb 27, 2025Updated last year
- javaGGC for generate commons.collections gadget chain☆11Nov 10, 2021Updated 4 years ago
- An advanced, full-stack AI-driven code review system built using the MERN stack (MongoDB, Express.js, React.js, Node.js), designed to rev…☆14Jul 1, 2026Updated 4 months ago
- NVD API 2.0 for python☆14Sep 26, 2024Updated 2 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Java ☕ reverse engineering tool - Batch decompile the jar package.☆11Feb 14, 2023Updated 3 years ago
- semgrep rules for flakiness, missed error handling, Lua antipatterns and pitfalls.☆18Oct 26, 2026Updated last week
- 承影用的 nuclei 漏扫模板☆15Jun 11, 2023Updated 3 years ago
- Focused malicious code detection ruleset, with a high protection-to-noise ratio☆151Feb 24, 2025Updated last year
- This work-in-progress "Orion Webshell Detector" was created with the intention of assisting web application code reviews coded in PHP, AS…☆13Oct 28, 2014Updated 12 years ago
- Semgrep queries developed by Trail of Bits.☆533May 7, 2026Updated 5 months ago
- node.js function serialization/deserialization☆10Jun 20, 2019Updated 7 years ago
- Manager of 14 third-party sources comprising approximately 4,000 Semgrep rules 🗂☆122Dec 24, 2025Updated 10 months ago
- An Open Attack/Defense Infrastructure Simulation Tool☆16Sep 2, 2026Updated last month
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- ☆13Jan 26, 2024Updated 2 years ago
- Parse scan results into python objects, i.e. Nessus, Nmap, testssl, metasploit, ...☆24Jan 4, 2020Updated 6 years ago
- [EMNLP 2026] VEX-Bench: Benchmarking LLM Agents for Assessing Exploitability of Software Supply Chain Vulnerabilities☆13Sep 25, 2026Updated last month
- Semgrep rules to identify GWT attack surface☆12Apr 28, 2022Updated 4 years ago
- Megagrep helps beginning a code review by searching for keywords in the code using "grep". It does not search for vulnerabilities directl…☆14Aug 21, 2026Updated 2 months ago
- arl_files备份项目☆23May 17, 2024Updated 2 years ago
- Collection of Semgrep rules for security analysis☆10Mar 30, 2024Updated 2 years ago