Discover Checkmarx/dustilock Open Source project by @Checkmarx

Stars
34
Rank 766,985 (Top 16 %)
Language
Go
License
Apache License 2.0
Created over 3 years ago
Updated almost 3 years ago

Checkmarx

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

DustiLock is a tool to find which of your dependencies is susceptible to a Dependency Confusion attack.

kics

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

Open Policy Agent

2,004

capital

A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities. Use c{api}tal to learn, train and exploit API Security vulnerabilities within your own API Security CTF.

CSS

268

JS-SCP

JavaScript Secure Coding Practices guide

173

2ms

Too many secrets (2MS) helps people protect their secrets on any file or on systems like CMS, chats and git

chainjacking

Find which of your direct GitHub dependencies is susceptible to RepoJacking attacks

Python

kics-github-action

GitHub actions of KICS scan - Keeping Infrastructure as Code Secure

JavaScript

chainalert-github-action

JavaScript

ast-cli

A CLI project wrapping application security testing (AST) APIs

Goatlin

(aka Kotlin Goat) - an intentionally vulnerable Kotlin application

Kotlin

cuteboi

This open-source project tracks CuteBoi's activity over time as there are evidence the actor is still active. All information provided here is intended for research purposes.

Vue

Kotlin-SCP

Kotlin Secure Coding Practices is a guide written for anyone using Kotlin for mobile development.

Ruby

ast-github-action

Checkmarx application security testing (AST) GitHub action

Shell

WebViewGoat

A deliberately vulnerable Android application to demonstrate exfiltration scenarios

JavaScript

red-lili

This open-source project tracks RED-LILI's activity over time as there are evidence the actor is still active. All information provided here is intended for research purposes.

Vue

ast-vscode-extension

The Checkmarx One Visual Studio Code plugin (extension) enables you to import results from a Checkmarx One scan directly into your VS Code console. You can view the vulnerabilities that were identified in your source code and navigate directly to the vulnerable code in the editor.

Hack

kics-cdk-validator-plugin

A KICS plugin for AWS CDK

TypeScript

driffty

Cloud Infrastructure Security Drift Detection - for KICS

Open Policy Agent

ci-cd-integrations

If you are using a CI/CD platform that doesn’t yet have a dedicated Checkmarx plugin, please check this repository.

Groovy

swag

ast-azure-plugin

The CxAST Azure DevOps plugin enables you to trigger SAST, SCA, and KICS scans directly from an Azure DevOps pipeline.

TypeScript

sast-to-ast-export

CLI tool to export data from CxSAST and import into Checkmarx Application Security Testing Platform

ast-teamcity-plugin

The CxAST TeamCity plugin enables you to trigger SAST, SCA, and KICS scans directly from a TeamCity project.

Java

ast-eclipse-plugin

The CxAST Eclipse plugin enables you to import results from a CxAST scan directly into your IDE. You can view the vulnerabilities that were identified in your source code and navigate directly to the vulnerable code in the editor.

Java

dast-github-action

Shell

API-Security-Top-10

ast-visual-studio-extension

The CxAST Visual Studio plugin enables you to import results from a CxAST scan directly into your IDE

JobDeCrypter

A decryption tool for the JobCrypter ransomware

homebrew-ast-cli

Ruby

NFCdrip

Java

solidity-ddenv

Containerized Solidity Decentralized App Development Environment

JavaScript

kics-codefresh-step

ast-jetbrains-plugin

The CxAST JetBrains plugin enables you to import results from a CxAST scan directly into your IDE.

Java

nexus-security-plugin

Java

SmartBulbExfil

Java

kics-orb

vorpal-reviewdog-github-action

Run Vorpal with reviewdog 🐶

Shell

Checkmarx/dustilock

Checkmarx

Reviews

Repository Details

More Repositories