wspr-ncsu / mininodeLinks
Mininode is a CLI tool to reduce the attack surface of the Node.js applications by using static analysis.
☆21Updated 2 years ago
Alternatives and similar repositories for mininode
Users that are interested in mininode are comparing it to the libraries listed below
Sorting:
- An HTTP Response fuzzer to find Vulnerabilities in Security Scanners☆27Updated last year
- Manager of 14 third-party sources comprising approximately 4,000 Semgrep rules 🗂☆98Updated last month
- Dependency Combobulator☆95Updated 2 years ago
- Mitigate security concerns of Dependency Confusion supply chain security risks☆51Updated 3 weeks ago
- Testability Pattern Catalogs for SAST☆31Updated 11 months ago
- Run CodeQL queries at scale using Multi-Repository Variant Analysis (MRVA)☆61Updated 9 months ago
- The OpenSSF CVE Benchmark consists of code and metadata for over 200 real life CVEs, as well as tooling to analyze the vulnerable codebas…☆160Updated last year
- Source code for ACM CCS 2020 Paper PMForce: Systematically Analyzing postMessage Handlers at Scale☆18Updated 4 years ago
- Kubernetes Pwnage for all☆57Updated 5 years ago
- JAW: A Graph-based Security Analysis Framework for Client-side JavaScript☆117Updated 4 months ago
- A collection of Semgrep rules which followed security guidelines for .NET and Java.☆23Updated 4 years ago
- ☆25Updated last year
- A Simple command line tool that helps checking web applications to identify insecure deserialization vulnerabilities.☆24Updated 6 years ago
- Generic SAST Library☆135Updated 7 months ago
- OpenAPI 2.0 (Swagger) fuzzer written in python. Basically TnT for your API.☆111Updated 3 years ago
- Dockerfile for AFL++ and helpful other tools☆21Updated 5 years ago
- ☆52Updated last year
- A collection of my Semgrep rules☆51Updated 2 years ago
- Scan pypi for typosquatting☆38Updated 3 years ago
- A Python3 module to assist in fuzzing web applications☆57Updated 2 years ago
- Reference architecture and proof of concept implementation for supply chain security gateway☆23Updated 2 years ago
- ☆44Updated 4 years ago
- An extension to use Semgrep inside Burp Suite.☆89Updated 8 months ago
- Documentation of Semgrep: a fast, open-source, static analysis tool.☆48Updated this week
- A regular expression fuzzer.☆45Updated 7 years ago
- TaintFlow, a framework for JavaScript dynamic information flow analysis.☆18Updated 3 years ago
- HTTP Desync Attack☆28Updated 5 years ago
- A command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration.☆62Updated 8 months ago
- Static Token And Credential Scanner☆95Updated 2 years ago
- A full example report☆11Updated 6 years ago