henryzz0 Goto Github PK

sn1per

Attack Surface Management Platform | Sn1perSecurity LLC

snyk-intellij-plugin

Snyk Vulnerability Scanner for IDEs based on the IntelliJ platform

software-supply-chain-compromises

A dataset of software supply chain compromises. Please help us maintain it!

software_supply_chain_papers

This repository contains a list of papers about software supply chain

software_supply_chain_security

sonic

Landing page for Software for Open Networking in the Cloud (SONiC) - http://azure.github.io/SONiC/

spdx-sbom-generator

Support CI generation of SBOMs via golang tooling.

static-analysis

⚙️ A curated list of static analysis (SAST) tools for all programming languages, config files, build tools, and more.

syft

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

tern

Tern is a software composition analysis tool and Python library that generates a Software Bill of Materials for container images and Dockerfiles. The SBoM that Tern generates will give you a layer-by-layer view of what's inside your container in a variety of formats including human-readable, JSON, HTML, SPDX and more.

threat-dragon

An open source, online threat modeling tool from OWASP

triton

Triton is a Dynamic Binary Analysis (DBA) framework. It provides internal components like a Dynamic Symbolic Execution (DSE) engine, a dynamic taint engine, AST representations of the x86, x86-64, ARM32 and AArch64 Instructions Set Architecture (ISA), SMT simplification passes, an SMT solver interface and, the last but not least, Python bindings.

vscode-extension

DeepCode extension for Visual Studio Code

vulfocus

🚀Vulfocus 是一个漏洞集成平台，将漏洞环境 docker 镜像，放入即可使用，开箱即用。

vulnerability

此项目将不定期从棱角社区对外进行公布一些最新漏洞。

waflab

A web-based testing platform for WAF (Web Application Firewall)'s correctness

wg-identifying-security-threats

The purpose of the Identifying Security Threats working group is to enable stakeholders to have informed confidence in the security of open source projects. We do this by collecting, curating, and communicating relevant metrics and metadata from open source projects and the ecosystems of which they are a part.

wg-security-tooling

OpenSSF Security Tooling Working Group

whatthehack

A collection of challenge based hack-a-thons including student guide, coach guide, lecture presentations, sample/instructional code and templates.

woodpecker-framwork-release

高危漏洞精准检测与深度利用框架