DakshSCRA

Daksh SCRA Source Code Review Assist root@kitploit: Author: - Debasis Mohanty [email protected] - Twitter / X: @coffeensecurity - www.coffeeandsecurity.com About Daksh SCRA Daksh SCRA Source Code Review Assist is built to enhance the efficiency of the source code review process, providing a...

vulnrepro-benchmark

VulnRepro A benchmark that checks if an AI model can actually review vulnerable code, or if it just sounds confident. Most security benchmarks ask one question: can the model find the bug? That is only half the job. The other half, the part that actually wears you down in real review work, is not...

GuardScan

🛡️ GuardScan 100% Free & Open Source • Privacy-First Security Scanning and AI Code Review CLI root@kitploit: / | | | | / \ | | \ / | / | / \ | \ | | / | | | | | | | | | |/ \ | | | | | | \ | | / \ | | | | | | | | | | || | || / | | || | | | / | |\ | || | || | | | |// \| \/ |/ // \| | |||...

tusk-cli

!IMPORTANT Previously used tusk-drift-cli? This repo has moved to tusk-cli, and older installed CLI versions may not auto-update across the rename. Please reinstall using the current install instructions below. The Tusk CLI provides tools for automated testing workflows. It supports three product...

scorecard

OpenSSF Scorecard...

autoSource

AutoSource AutoSource is an automated source code review framework integrated with SonarQube which is capable of performing static code analysis/reviews. It can be used for effectively finding the vulnerabilities at very early stage of the SDLCSoftware Development Life Cycle. The user can scan th...

awesome-appsec-interview

Awesome AppSec Interview A curated list of resources, practice questions, and study materials to help you prepare for Application Security Engineer interviews, organized by interview type. Contents Interview Overview Secure Code Review Threat Modeling Coding & Scripting Scenario-Based Interviews...

APKHunt

APKHunt | OWASP MASVS Static Analyzer APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential...

appsec-agent

AppSec Agent AI-powered security agents for code review, PR scanning, threat modeling, fix generation, and more. You can use AppSec Agent in three ways:...

voron-crypto

Voron crypto/protocol library — request for review This is the crypto and messaging-protocol core of a small E2EE messenger project, pulled out on its own for outside review. It is not the whole product — the Android client and deployment config are intentionally left out; this is just the part...

secure-agent-playbook

Secure Agent Playbook An open-source security playbook for AI agents. Structured, OWASP-grounded procedures that enable agents to perform security engineering tasks — from code review to AI agent security audits. Table of Contents Why Use This? What This Is Quick Start Skills Catalog Agents Examp...

bidi-guard

bidi-guard Scan code for invisible bidirectional Unicode characters Why This Exists Invisible Unicode bidirectional characters can make source code display differently than it executes. This is CVE-2021-42574 — the Trojan Source attack. An attacker embeds characters that reverse text direction. I...

CVE-2026-22686

Enclave VM Sandbox Escape CTF Challenge Challenge: "Breaking the Walls" Difficulty: Hard Category: Source Code Review / Sandbox Escape Points: 500 Scenario You've discovered a mysterious sandboxed JavaScript execution environment...

cq

cq Code Query, una herramienta universal de escaneo de seguridad de código. CQ escanea código en busca de vulnerabilidades de seguridad y otros elementos de interés para revisores de código centrados en seguridad. Genera archivos de texto que contienen referencias a los problemas encontrados, en ...

VCG

==================================================================================== VCG VisualCodeGrepper Current version: 2.3.2 ==================================================================================== Contents: 1. Overview 2. Latest additions to VCG V2.3.2 3. Using VCG Input...

CVE-2023-4762-Code-Review

Source https://github.com/buptsb/CVE-2023-4762...

ai-code-review

🔍 codereview AI-powered code review in your terminal. One command. Instant feedback. Catches security vulnerabilities, bugs, and bad patterns before they hit production. Install · Quick Start · Usage · Providers · Contributing What It Does codereview sends your code to an LLM and returns a...

OpenClaw went viral. Meet the maintainers building and securing it.

What began as a personal experiment quickly became a global open source project with extraordinary momentum. OpenClaw is a personal AI assistant that runs on users' devices and connects with the messaging channels they already use. Started by Peter Steinberger as a weekend project in November 202...

DakshSCRA v0.38-beta

Daksh SCRA Source Code Review Assist root@kitploit: Author: - Debasis Mohanty [email protected] - Twitter / X: @coffeensecurity - www.coffeeandsecurity.com About Daksh SCRA Daksh SCRA Source Code Review Assist tool is built to enhance the efficiency of the source code review process, providi...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098997)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098997 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: ac97: fix a double free in sndac97controllerregister If ac97addadapter fails, putdevice is...