wspr-ncsu / mininode
Mininode is a CLI tool to reduce the attack surface of the Node.js applications by using static analysis.
☆22Updated last year
Alternatives and similar repositories for mininode:
Users that are interested in mininode are comparing it to the libraries listed below
- An HTTP Response fuzzer to find Vulnerabilities in Security Scanners☆26Updated 8 months ago
- PoC: Python package static and dynamic analysis to detect environment variable stealing☆10Updated 4 years ago
- Paper, data and code from Investigating Potential Security Vulnerability Manifestation through Various Analyses & Inferences Regarding In…☆18Updated 4 years ago
- A Simple command line tool that helps checking web applications to identify insecure deserialization vulnerabilities.☆24Updated 5 years ago
- A collection of Semgrep rules which followed security guidelines for .NET and Java.☆17Updated 3 years ago
- OWASP ZAP add-on to detect reflected parameter vulnerabilities efficiently☆12Updated 4 years ago
- Swiftly search FDNS datasets from Rapid7 Open Data☆21Updated 2 years ago
- ☆23Updated last year
- A wrapper around jq, to help you parse jq output!☆30Updated 4 years ago
- Tools for auditing WAFS☆19Updated 3 years ago
- Pythonize Intruder Payload☆13Updated 4 years ago
- Proof of concept about the privilege escalation flaw identified in Google's Osconfig☆10Updated 4 years ago
- Docker container for running OWASP WebGoat.NET application☆11Updated 6 years ago
- Quick WAF "paranoid" Doctor Evaluation | WAFPARAN01D3 Tool☆25Updated 3 years ago
- ☆29Updated 10 months ago
- Exploit CVE-2021-25735: Kubernetes Validating Admission Webhook Bypass☆18Updated 3 years ago
- Dependency Combobulator☆92Updated last year
- mesh-kridik is an open-source security checker that performs various security checks on a Kubernetes cluster with istio service mesh and …☆26Updated 3 months ago
- A Developer and Security Engineer friendly package for Securing NodeJS Applications.☆27Updated 2 years ago
- The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters☆14Updated 3 years ago
- Testability Pattern Catalogs for SAST☆29Updated 3 weeks ago
- Mitigate security concerns of Dependency Confusion supply chain security risks☆46Updated 2 years ago
- HTTP Desync Attack☆28Updated 4 years ago
- Scan and import relevant requests directly to burp!☆9Updated 5 years ago
- Collection of different exploitation scenarios of JWT.☆21Updated 3 years ago
- Signatures for wraith used to detect secrets across various sources☆15Updated 2 years ago
- Extract endpoints from specific Git repository for fuzzing☆22Updated 4 years ago
- A Python script that gathers all valid IP addresses from all text files from a directory, and checks them against Whois database, TOR rel…☆30Updated 2 years ago
- Java deserialization examples☆13Updated 6 years ago
- Python Package for burprestapi☆16Updated 5 years ago