threadfix-examples

This repository contains scripts and other tools that can be used with ThreadFix.

Contents

automated_exception_repoorting/

Script that pulls vulnerability data via the ThreadFix API and puts it into a CSV file.

amass_to_threadfix/

Scripts that track domains to identify associated hostnames so those can be pushed to ThreadFix as new Applications to bring under management.

software_attack_surface/

This contains some scripts that can help organizations identify their software attack surface.

split_whitehat_results/

Unfinished scritps that look at splitting results from WhiteHat security DAST testing into multiple ThreadFix applications.

web_app_attack_surface/

Various scripts that calculate web application attack surface as well as the differences betweeen web application attack surfaces between versions of the applications.