Gather and update all available and newest CVEs with their PoC.
-
Updated
Aug 8, 2022 - HTML
{{ message }}
Gather and update all available and newest CVEs with their PoC.
Integrates Dependency-Check reports into SonarQube
Asset inventory on public bug bounty programs.
《macOS软件安全与逆向分析》随书源码
Keyshuffling Attack for Persistent Early Code Execution in the Nintendo 3DS Secure Bootchain
SBT Plugin for OWASP DependencyCheck. Monitor your dependencies and report if there are any publicly known vulnerabilities (e.g. CVEs).
A simple Java command-line utility to mirror the CVE JSON data from NIST.
Software Bill of Material (SBOM) standard designed for use in application security contexts and supply chain component analysis
Jenkins plugin for OWASP Dependency-Check. Inspects project components for known vulnerabilities (e.g. CVEs).
Trickest Workflow for discovering log4j vulnerabilities and gathering the newest community payloads.
Find CVE PoCs on GitHub
A Java library for parsing and programmatically using threat models
Integrates OWASP Zed Attack Proxy reports into SonarQube
A Github repository I created while studying the Software Security course on Coursera. I made the repository public to discuss solutions with like-minded developers.
Vendor-Neutral Security Tool Automation Controller (over REST)
A simple Java command-line utility to mirror the entire contents of VulnDB.
SIde-Channel Analysis toolKit: embedded security evaluation tools
Data Obfuscation for C/C++ Code Based on Residue Number Coding (RNC)
Repository of events for the Software Crafters Sydney community
Megagrep helps beginning a code review by searching for keywords in the code using "grep". It does not search for vulnerabilities directly but for places where you could manually find some.
Attacking the Nintendo 3DS Boot ROMs
《macOS软件安全与逆向分析》勘误
Solutions to Software Security course provided by University of Maryland - Coursera
A toolchain for software integrity protection including self-checksumming, control flow integrity, result checking, oblivious hashing and a sample program protected using Intel SGX
Software Security project - Malware Detection Analysis A.A. 2019/2020.
This repository contains exploit to the webserver from the NETWORK_PROGRAMS repository.
My lab reports for some of the security labs developed by Prof. Du of SU.
Add a description, image, and links to the software-security topic page so that developers can more easily learn about it.
To associate your repository with the software-security topic, visit your repo's landing page and select "manage topics."
The enhancement may already be reported! Please search for the enhancement before creating one.
Current Behavior:
Currently when you download the SBOM from Home->Projects->->Components tab dependencies are not included.
Proposed Behavior:
Please include dependence when downloading the SBOM. Thanks