🔍 ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase, the Google Summer of Code, Azure credits, nexB and others generous sponsors!

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

A source code static analysis platform for AppSec enthusiasts.

prancer platform is an IaC Security engine + Continuous Compliance for your cloud (Azure, AWS, GCP) and Kubernetes environment

ScanCode.io is a server to script and automate software composition analysis pipelines with ScanPipe pipelines. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ Google Summer of Code, nexB and others generous sponsors!

Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning

Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.0, purl, and vers.

Python Elliptic Curve Side-Channel Analysis toolkit.

用于检测python项目的第三方依赖组件是否存在安全漏洞。

Automate open source license compliance and ensure software supply chain integrity

Using PyRaider You can scan installed dependencies known security vulnerabilities. It uses publicly known exploits, vulnerabilities database.

Discrete signal processing tool for side chanel data leakage attacks and analysis. Air-gapped keylogger PoC.

An implementation in Python of the Sine Cosine Algorithm (SCA), for solving optimization problems, with different randomization methods.

CLI Security Tool for SAST & SCA

QSCAT is a QGIS plugin for shoreline change analysis (SCA).

Code Insight report showing project vulnerabilities

Side channel attack simulations

This is a small framework for implementing, running and testing Machine Learning-based Side-Channel Attacks. As the title says, I rely heavily on Keras in the example, but any Machine Learning model with an identical API should work absolutely fine. Feel free to contact me in case of any questions or suggestions.

Python SDK for the Finite State Platform API