Discover Contrast-Security-OSS/DjanGoat Open Source project

A tiny Java agent that blocks attacks against unsafe deserialization

105

contrast-rO0

Safelog4j is an instrumentation-based security tool to help teams discover, verify, and solve log4shell vulnerabilities without scanning or upgrading

safelog4j

A static analysis API for finding deserialization attack gadgets

joogle

Intentionally vulnerable Go web app.

go-test-bench

jinfinity

An API for consuming all the memory of Java apps using deserialization

POJOs generated from the Static Analysis Results Interchange Format (SARIF) JSON schema.

java-sarif

Contrast Scan GitHub action

contrastscan-action

sheepdog

A K8s operator to inject agents into existing K8s workloads.

agent-operator

vulnpy

Purposely-vulnerable Python functions

Intentionally Vulnerable Node Applications

docs

Groovy

NodeTestBench

vulnerable-spring-boot-application

Burp Plugin for Contrast Security

Burptrast

A collection of intentionally vulnerable test bench applications for testing the Contrast Security Node Agent.

NodeTestBenches

Java SDK for Contrast Security

contrast-sdk-java

Information about working with the Contrast Engineering Team.

join-the-team

ticketbook

This is a purposely insecure web application.

Contrast SCA GitHub Action

contrast-sca-action

demo-netflicks

contrast-sdk-dotnet

.Net API for the Contrast REST API

contrast-maven-plugin

Contrast Maven Plugin

A small microservice that demonstrating how Contrast works with microservices

meow

HTML

java-microservice-sample-apps

contrast-sdk-python

serialbox

A github action that builds, deploys, and instruments a Contrast Security Agent with an application via Amazon Elastic Kubernetes Service.

integration-eks-github-action

demo-terracotta-bank

webgoat

Contrast Operations Hire Project

ops-hire-project

integration-azure-spring-cloud-github-action

A github action that deploys and instruments a Contrast Security Agent with an application via Azure Spring Cloud.

Tool for generating MySQL forensics specifically for TeamServer.

mysql-forensics-tool

PLpgSQL

integration-verify-github-action

GitHub Action to verify an application by determining whether the application violates a job outcome policy or threshold of open vulnerabilities

A github action that builds, deploys, and instruments a Contrast Security Agent with an application via Azure Kubernetes Service.

integration-aks-github-action

Example code examples and scripts to complement documentation for Contrast .NET Agents

contrast-dotnet-examples

PowerShell

workshop

Contrast Security Workshop

Standalone utility for collecting Windows IIS server information

dotnet-dvnr

sdet-hire-project

A set of directions for SDET candidates to complete

contrast-chrome-extension

Contrast Security Orb for CircleCI

demo-petclinic

TypeScript

contrast-security-orb

KoaTestBench

Intentionally Vulnerable Koa Application

Script to populate a Contrast environment with links to Secure Code Warrior videos and training exercises.

integrations-scw

Exploit of the log4shell vulnerability in an AWS Lambda function

contrast-security-oss.github.io

HTML

log4shell_serverless

Google Apps Scripts for connecting TeamServer with Google Apps such as Sheets

demo-webgoat7

TypeScript

Google-Apps-Script

react-test-bench

Intentionally vulnerable React web application for exercising vulnerability detection

AdminTool

Build an ansible-packer Docker container

contrast-teamserver-api-docs

demo-webgoat.net

ansible-packer-docker

home-automation

A CLI tool for adding Contrast Integrations via rule customizations.

contrast-integrations-cli

Contrast Security App for Splunk

ContrastSplunkApp

This repo is a companion to the Contrast agent deployment in Docker - Node.js guide.

contrastsecurity-node-docker-onboarding-guide-sample-project

contrast-intellij-plugin

Dockerfile which builds an image containing maven and yarn build tools

maven-yarn-docker

contrast-scan-owasp-scorer

A command line tool for visualizing Contrast trace XML exports.

vizt

A Chef cookbook to install the contrast security java agent.

chef-contrast-java-agent

vulneruby_engine

Docker images for building, deploying, and testing Contrast proxy (WAF) agent

proxy-agent-docker

contrast-sdk-javascript

attack-load-generator

Intentionally Vulnerable Sails Applications

SailsTestBench

maven-cross-openjdk-docker

Docker image for building node projects and deploying to AWS Lambda

contrast-java-examples

demo-nodegoat

demo-k8s-operator

contrast-sdk-ruby

node-aws-docker

agent-teamserver-tests

Tools for building Open API specification projects in CI

contrast-gradle-plugin

Groovy

oapi-build-docker

Setting up EOP TeamServer on Various Platforms

eop-examples

vulneruby

A sample Spring-based application

spring-petclinic