appsec

Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependencies. CI and Git friendly.

workflow appsec scanners license-scan devsecops sast dependency-scan

Updated Sep 1, 2023
Python

JohnTroony / Blisqy

Star

Version 0.2 - Exploit Time-based blind-SQL injection in HTTP-Headers (MySQL/MariaDB).

sql sql-injection exploitation appsec blind-sql-injection sql-payloads database-security blisqy john-ombagi

Updated Mar 24, 2019
Python

OWASP / threat-model-cookbook

Sponsor

Star

This project is about creating and publishing threat model examples.

threat-modeling appsec threat-model threat-models threat-modelling

Updated Nov 10, 2021
Python

A Burp extension generates dynamic payloads to uncover injection flaws (LFI, RCE, SQLi), creates user access tables to identify authentication and authorization issues, attempts to bypass HTTP 403 access restrictions, and converts HTTP requests as JavaScript code for enhanced XSS exploitation.

hacking cybersecurity penetration-testing application-security pentesting appsec hacking-tool burpsuite offsec burp-extensions offensivesecurity

Updated Jul 9, 2024
Python

MattKeeley / Spoofy

Star

Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records.

python security phishing python3 emails cybersecurity penetration-testing spf infosec application-security pentesting appsec dmarc deliverability email-security redteam penetration-testing-tools

Updated Feb 28, 2024
Python

aparsons / bag-of-holding

Star

An application to assist in the organization and prioritization of software security activities.

python security django django-rest-framework appsec threadfix security-tools

Updated Jun 10, 2021
Python

blacklanternsecurity / badsecrets

Star

A library for detecting known secrets across many web frameworks

python rails flask security jwt django cryptography symfony secrets peoplesoft asp-net express-js appsec javaserver-faces telerik-ui

Updated Jun 18, 2024
Python

Anof-cyber / Pentest-Mapper

Sponsor

Star

A Burp Suite Extension for pentester and bug bounty hunters an to maintain checklist, map flows, write test cases and track vulnerabilities

infosec pentesting bugbounty burp appsec burp-plugin burpsuite burp-extensions burpsuite-extender burpsuite-tools

Updated Aug 2, 2023
Python

andresriancho / websocket-fuzzer

Star

HTML5 WebSocket message fuzzer

html5 websocket fuzzing appsec

Updated Nov 23, 2018
Python

we45 / DVFaaS-Damn-Vulnerable-Functions-as-a-Service

Star

Intentionally Vulnerable Serverless Functions to understand the specifics of Serverless Security Vulnerabilities

aws aws-lambda serverless faas appsec chalice vulnerable-apps

Updated Dec 8, 2022
Python

enemy-submarine / pidrila

Star

Python Interactive Deepweb-oriented Rapid Intelligent Link Analyzer

python security scanner hacking penetration-testing bug-bounty pentesting pentest appsec dirbuster netstalking scanner-web

Updated Nov 8, 2020
Python

F5-Labs / cryptonice

Star

CryptoNice is both a command line tool and library which provides the ability to scan and report on the configuration of SSL/TLS for your internet or internal facing web services. Built using the sslyze API and ssl, http-client and dns libraries, cryptonice collects data on a given domain and performs a series of tests to check TLS configuration…