S

security

Hoppr-Cop is CLI and Hoppr Plugin that generates high quality vulnerability information from a cyclone-dx Software Bill of Materials (SBOM) by aggregating data from multiple vulnerability databases.

Probably the most modern and sophisticated insecure web application!

Clone of OWASP Juice Shop with GitLab branding and more.

Learn more by seeing our DevSecOps Tutorial

REDHOOD CookieHunter is a powerful tool for analyzing HTTP cookie security. It checks for critical flags, attributes, and prefixes like HttpOnly, Secure, SameSite, Expires, and __Host. With both CLI and web interfaces, it's an essential tool for developers and security professionals to identify and fix web vulnerabilities.

RedFuzz v5.0.0 - Advanced Web Application Fuzzer with Stateful Fuzzing, OpenAPI Integration, and Plugin Support. Features comprehensive vulnerability detection, automatic verification, evidence collection, smart rate limiting, and modular plugin system. Perfect for security testing and penetration testing workflows.

Throwback to 2014 where I had created a multimedia website as part of schoolwork.

Web utility to generate passwords for MySQL that are actually accepted by MySQL.

Ada Web Application - Framework to build high performance secure web applications

Justniffer Just A Network TCP Packet Sniffer. Justniffer is a network protocol analyzer that captures network traffic and produces logs in a customized way, can emulate web server log files, track response times and extract all "intercepted" files from the HTTP traffic

Convert from SARIF to GitLab Code Quality and SAST report.

Public pages of the ANR project "FATES-MLOps"

This basic note-taking application is used to showcase the different GitLab features around security and governance. To get started checkout the Full Tutorial Documentation.

Examples for GitLab CI/CD integration with Parasoft C/C++test

Inkscape vector image editor https://th.wikipedia.org/wiki/%E0%B8%AB%E0%B8%99%E0%B9%89%E0%B8%B2%E0%B8%AB%E0%B8%A5%E0%B8%B1%E0%B8%81 https://p01-catalog1-html.jimdofree.com/%E0%B8%A3%E0%B8%B2%E0%B8%A2%E0%B8%8A-%E0%B8%AD-%E0%B8%9C%E0%B8%81%E0%B8%81-%E0%B9%81%E0%B8%95-%E0%B8%A5%E0%B8%B0-%E0%B8%AA%E0%B8%A0-138/

A tool for detecting Self-Admitted Security Debt (SASD) in software projects using NLP. Developed as part of my MEng dissertation at Queen's University Belfast.

Audits the dependencies of every crate in crates.io for known vulnerabilities. Think of it like a cargo audit across the Rust ecosystem.

Opensource, cross-platform and portable toolkit for automating routine processes when carrying out various works for testing!

iu-security-club.github.io

Stock control supervisor. A list of Free Software network services and web applications which can be hosted on your own servers