dawnscanner by thesp0nge
Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.
created at April 4, 2013, 1:06 p.m.
security-code-scan by security-code-scan
Vulnerability Patterns Detector for C# and VB.NET
created at Dec. 31, 2017, 9:38 a.m.
terragoat by bridgecrewio
TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.
created at March 27, 2020, 4:56 p.m.
wrongsecrets by OWASP
Vulnerable app with examples showing how to not use secrets
created at Aug. 19, 2020, 5:59 a.m.
NEW!
awesome-threat-modelling by hysnsec
A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.
created at Dec. 29, 2019, 6:30 a.m.
ssllabs-scan by ssllabs
A command-line reference-implementation client for SSL Labs APIs, designed for automated and/or bulk testing.
created at Oct. 14, 2014, 10:10 a.m.
kube-score by zegl
Kubernetes object analysis with recommendations for improved reliability and security. kube-score actively prevents downtime and bugs in your Kubernetes YAML and Charts. Static code analysis for Kubernetes.
created at Sept. 16, 2018, 1:19 p.m.
badssl.com by chromium
Memorable site for testing clients against bad SSL configs.
created at April 7, 2015, 10:37 p.m.
conftest by open-policy-agent
Write tests against structured configuration data using the Open Policy Agent Rego query language
created at March 28, 2019, 5:12 p.m.
ansible-lint by ansible
ansible-lint checks playbooks for practices and behavior that could potentially be improved and can fix some of the most common ones for you
created at Aug. 14, 2013, 11:08 a.m.