ronin Ronin is a Ruby platform for vulnerability research and exploit development. Ronin allows for the rapid development and distribution of code, Exploits, Payloads, Scanners, etc, via Repositories. Features Supports installing/updating/uninstalling of Repositories. Supports installing Repositories from various media types: Subversion...
Programming / Vulnerability Analysis / Web Vulnerability Analysis
by do son · Published February 13, 2021 · Last modified June 8, 2022
What is Horusec? Horusec is an open-source tool that performs a static code analysis to identify security flaws during the development process. Currently, the languages for analysis are C#, Java, Kotlin, Python, Ruby, Golang,...
threatspec Threatspec is an open-source project that aims to close the gap between development and security by bringing the threat modeling process further into the development process. This is achieved by having developers and...
Programming / Web Vulnerability Analysis
by do son · Published November 1, 2020 · Last modified February 15, 2023
sast-scan Scan is a free open-source security tool for modern DevOps teams. With an integrated multi-scanner based design, Scan can detect various kinds of security flaws in your application and infrastructure code in a single...
Programming / Vulnerability Analysis / Web Vulnerability Analysis
by do son · Published October 21, 2020 · Last modified June 23, 2021
Security auditing and static code analysis Aura is a static analysis framework developed as a response to the ever-increasing threat of malicious packages and vulnerable code published on PyPI. Aura is a static analysis...
Golang has recently released several updates to strengthen security. Like building applications in any other language, cyber protection must be a top priority. Go is an open-source language, so it’s essential to implement reliable...
Today, you’ll be taking a closer look at the top ReactJS features. These days, the technology society is filled with various frameworks. To my way of thinking, many technologies were accessible like Angular, Node,...
Cybersecurity comprises several areas of specialization. Therefore, a cybersecurity professional must have a good command of several programming languages as well as computer networking. If you are new to this field, you probably are...
Programming / Web Vulnerability Analysis
by do son · Published June 17, 2020 · Last modified January 31, 2024
Semgrep Semgrep is a command-line tool for offline static analysis. Use pre-built or custom rules to enforce code and security standards in your codebase. You can try it now with our interactive live editor. Semgrep combines the...
Forerunner The Forerunner library is a fast, lightweight, and extensible networking library created to aid in the development of robust network-centric applications such as IP Scanners, Port Knockers, Clients, Servers, etc. In its current...
Programming / Web Vulnerability Analysis
by do son · Published April 16, 2020 · Last modified January 23, 2024
INTERCEPT Stupidly easy to use, small footprint Policy as Code subsecond command-line scanner that leverages the power of the fastest multi-line search tool to scan your codebase. It can be used as a linter, guard...
Programming / Web Vulnerability Analysis
by do son · Published December 30, 2019 · Last modified August 27, 2023
PHP Fuzzer This library implements a fuzzer for PHP, which can be used to find bugs in libraries (particularly parsing libraries) by feeding them “random” inputs. Feedback from edge coverage instrumentation is used to guide the...
LAVA: Large Scale Automated Vulnerability Addition Evaluating and improving bug-finding tools is currently difficult due to a shortage of ground truth corpora (i.e., software that has known bugs with triggering inputs). LAVA attempts to...
PMD PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It supports Java, JavaScript, Salesforce.com Apex and Visualforce, PLSQL, Apache Velocity,...
Programming / Vulnerability Analysis / Web Vulnerability Analysis
by do son · Published December 12, 2019
huskyCI – Performing security tests inside your CI huskyCI is an open-source tool that performs security tests inside CI pipelines of multiple projects and centralizes all results into a database for further analysis and...
