jxdv
Follow
Lists (1)
Stars
Community curated list of templates for the nuclei engine to find security vulnerabilities.
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the …
Check your Python environments for vulnerable Open Source packages with OSS Index or Sonatype Nexus Lifecycle.
A modular vulnerability scanner with automatic report generation capabilities.
This is a companion to the Security Engineer Questions
Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exhaustive list but i felt these questions were important to be…
The repository has collected about 10,000 malicious pypi packages. This dataset is the work of the ASE 2023 paper "An Empirical Study of Malicious Code In PyPI Ecosystem". Of course, we will contin…
A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
Audits Python environments, requirements files and dependency trees for known security vulnerabilities, and can automatically fix them
Every Security Engineer Interview Question From Glassdoor.com
OWASP Domain Protect - prevent subdomain takeover
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
An open-source dataset of malicious software packages found in the wild, 100% vetted by humans.
A small collection of vulnerable code snippets
Python implementation of OWASP CycloneDX
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
An extremely fast Python linter and code formatter, written in Rust.
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
DevSecOps, ASPM, Vulnerability Management. All on one platform.
GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems
🐍 🔍 GuardDog is a CLI tool to Identify malicious PyPI and npm packages