deepsecrets

DeepSecrets - una mejor herramienta para el escaneo de secretos !WARNING El desarrollo activo se trasladó al fork del creador en https://github.com/ntoskernel/deepsecrets. Este repositorio no recibirá más actualizaciones...

zap-scripts

zap-scripts Scripts de Zed Attack Proxy para encontrar CVEs y Secretos. Construcción Este proyecto usa Gradle para construir el add-on de ZAP, simplemente ejecute: ./gradlew build en el directorio principal del proyecto, el add-on se colocará en el directorio build/zapAddOn/bin/. Uso La forma más...

actions-secrets

SecureStack Secrets Analysis GitHub Action A GitHub Action that analyses your source code for secrets, credentials, API keys, server and database hostnames/URLS, and a lot more! When you add this to GitHub Actions we will analyze your source code to make sure there is no sensitive data in your...

semgrep v1.179.0

Code scanning at ludicrous speed. Semgrep is a fast, open-source, static analysis tool that searches code, finds bugs, and enforces secure guardrails and coding standards. Semgrep supports 30+ languages and can run in an IDE, as a pre-commit check, and as part of CI/CD workflows. Semgrep is...

foxguard v0.13.0

foxguard Fast local security scanning for code, secrets, dependencies, and crypto risk. Integrated into 0sec, the open cybersecurity harness. npx foxguard . Why 200+ built-in rules across 12 source languages, plus config and manifest checks Taint tracking for 14 languages, with cross-file analysi...

poc-csharp-aspnetcore

poc-csharp-aspnetcore A sample ASP.NET Core C applicat...

EUVD-2024-2481

Malicious code in bioql PyPI...

CVE-2024-43379

CVE-2024-43379 concerns TruffleHog, a secrets-scanning tool. According to the connected documents, the issue is a Blind SSRF vulnerability in some detectors prior to version 3.81.9 . The attack requires an attacker-crafted input that, when scanned, could cause an unauthenticated GET endpoint that...

End-to-End Secrets Security: Making a Plan to Secure Your Machine Identities

At the heart of every application are secrets. Credentials that allow human-to-machine and machine-to-machine communication. Machine identities outnumber human identities by a factor of 45-to-1 and represent the majority of secrets we need to worry about. According to CyberArk's recent research,...