cosa-nostra

Cosa Nostra Cosa Nostra is an open source software clustering toolkit with a focus on malware analysis. It can create phylogenetic trees of binary malware samples that are structurally similar. It was initially released during SyScan360 Shanghai 2016. I basically maintain it since 2016 for my one...

awesome-nodejs-security

A curated list of awesome Node.js Security resources. Learn Node.js Secure Coding techniques and best practices from Liran Tal Contents Tools Web Framework Hardening Static Code Analysis Dynamic Application Security Testing Input/Output Validation Secure Composition CSRF Vulnerabilities and...

miasm

What is Miasm? Miasm is a free and open source GPLv2 reverse engineering framework. Miasm aims to analyze / modify / generate binary programs. Here is a non exhaustive list of features: Opening / modifying / generating PE / ELF 32 / 64 LE / BE Assembling / Disassembling X86 / ARM / MIPS / SH4 /...

wpbullet

wpBullet A static code analysis for WordPress Plugins/Themes and PHP Installation Simply clone the repository, install requirements and run the script $ git clone https://github.com/webarx-security/wpbullet wpbullet $ cd wpbullet $ pip install -r requirements.txt $ python wpbullet.py Usage...

shannon

!NOTE Cyber verification for Anthropic and OpenAI models: complete your provider's cyber verification program to prevent model failures and refusals during cyber workloads. Shannon is an autonomous, AI pentester for web applications and APIs. It analyzes your source code, identifies attack paths,...

kube-score

kube-score kube-score is a tool that performs static code analysis of your Kubernetes object definitions. The output is a list of recommendations of what you can improve to make your application more secure and resilient. You can test kube-score out in the browser with the online demo source...

bincat

Introduction What is BinCAT? BinCAT is a static Binary Code Analysis Toolkit, designed to help reverse engineers, directly from IDA or using Python for automation. It features: value analysis registers and memory taint analysis type reconstruction and propagation backward and forward analysis...

checkov

Checkov is a static code analysis tool for infrastructure as code IaC and also a software composition analysis SCA tool for images and open source packages. It scans cloud infrastructure provisioned using Terraform, Terraform plan, Cloudformation, AWS SAM, Kubernetes, Helm charts, Kustomize,...

CodeAnalysis

TCA, Tencent Cloud Code Analysis code-named: CodeDog English | 简体中文 TCA Official Official website: https://tca.tencent.com Official introduction: https://cloud.tencent.com/product/tcap TCA CNB PagesBetter Internet Speed Domestic: https://cnb.cool/tencent/cloud/tca/code-analysis Domestic:...

StaCoAn

StaCoAn Not maintained anymore! Will be archived soon. StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications. This tool will look for interesting lines in the code which can contain: Hardcoded credential...

autoSource

AutoSource AutoSource is an automated source code review framework integrated with SonarQube which is capable of performing static code analysis/reviews. It can be used for effectively finding the vulnerabilities at very early stage of the SDLCSoftware Development Life Cycle. The user can scan th...

ngrev

ngrev Graphical tool for reverse engineering of Angular projects. It allows you to navigate in the structure of your application and observe the relationship between the different modules, providers, and directives. The tool performs static code analysis which means that you don't have to run you...

HackBot

HackBot - AI Cybersecurity Chatbot | | | | | | | | | | || |/ |/ | |/ / \ / | | By: Morpheuslord | | | | | | | | | | AI used: Meta-LLama2 || ||,|||\/ / | Introduction Welcome to HackBot, an AI-powered cybersecurity chatbot designed to provide helpful and accurate answers to your...

gosec

gosec - مدقق أمان Go يفحص الكود المصدري بحثًا عن مشاكل أمنية من خلال مسح تمثيل AST و SSA لكود Go. روابط سريعة إجراء GitHub التثبيت المحلي بداية سريعة أنماط الاستخدام الشائعة اختيار القواعد صيغ المخرجات الميزات قواعد قائمة على الأنماط لاكتشاف المشاكل الأمنية الشائعة في كود Go محللات قائمة على SSA...

deepsecrets

DeepSecrets - a better tool for secret scanning !WARNING Active development was switched to the creator's fork at https://github.com/ntoskernel/deepsecrets. This repository will not receive any updates...

SucoshScanny

Sucosh Scanny "Sucosh" is an automated Source Code vulnerability scannerSAST and assessment framework for PythonFlask-Django & NodeJs capable of performing code review in Web Application Developing or Source Code Analysis processes.It’s can detect a lot of vulnerabilityRCE,SSTI,Insecure...

Gin-Vue-admin-poc-CVE-2022-21660

Vulnérabilité d'escalade verticale de privilèges et analyse de code Gin-Vue-admin - CVE-2022-21660 I. Introduction Bienvenue à tous les experts ! N'hésitez pas à donner une étoile star à ce projet.http https://github.com/flipped-aurora/gin-vue-admin/ Après avoir terminé l'article, demander un CVE...

ghostrings

Ghostrings نصوص برمجية لاستعادة تعريفات السلاسل في ثنائيات Go باستخدام تحليل P-Code. تم اختبارها مع x86 وx86-64 وARM وARM64. النصوص البرمجية Golang يمكن العثور عليها في فئة Golang في Script Manager. GoDynamicStrings.java يحلل P-Code للعثور على بنى السلاسل النصية المنشأة على المكدس. يستخدم تحليل ن...

multiplier

Multiplier trouve plus de bogues plus rapidement Multiplier offre des capacités de compréhension de code précises et complètes. Pour ce faire, il enregistre les artefacts de compilation dans une base de données, puis les rend accessibles de manière persistante via une API C++ ou Python. Multiplie...

apkvuln

ApkVuln \ / \ / \ / \ / \ /\ \ \ \ /|\ \ \ | | | \ | |/ /\ \ / / | | | | | | | / \ | / ' \ V /| || | || . | // \|| |\ / /|||| With ApkVuln you will obtain the .java files of an APK and they will be analyzed in search of possible vulnerabilities in the code, for it will make use of regular...