jeremylong Goto Github PK

attack-surface-analyzer

A tool for analyzing the attack surface of an application

audio

Teensy Audio Library

audiofreezev2

AudioFreeze for new PCB layout

avdweb_dac16

Cheap 16 bit DAC AD5662 for the Arduino

blackhat-arsenal-tools

Official Black Hat Arsenal Security Tools Repository

bodge

build-inspector

Inspect your builds to look for changes in filesystem, network traffic and running processes.

burp-retire-js

Burp/ZAP/Maven extension that integrate Retire.js repository to find vulnerable Javascript libraries.

bypassing-required-reviews

caspr

Content-Security-Policy report aggregator/analyzer

cdn-jscan

checkmarx-github-action

Checkmarx Scan Github Action

class-file-format-rule

A maven-enforcer rule that ensures dependencies do not exceed the required class file format for a particular JVM.

commons-jcs

Apache Commons JCS

cpe-parser

A utility for validating and parsing Common Platform Enumeration (CPE) v2.2 and v2.3 as originally defined by MITRE and maintained by NIST

cx-flow

Checkmarx Scan and Result Orchestration

delete-workflow-runs

An action to delete workflow runs in a repository.

dependency-check-plugin

Jenkins plugin for OWASP Dependency-Check. Inspects project components for known vulnerabilities (e.g. CVEs).

dependencycheck

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

gitgat

Evaluate source control (GitHub) security posture

github-release-maven-plugin

Maven plugin for creating GitHub releases

gradle-task-tree

Gradle plugin that adds a 'taskTree' task that prints task dependency tree

grokassembly

Mono/.NET Project to get information about an assembly. Primarily for OWASP Dependency Check

guarddog

:snake: :mag: GuardDog is a CLI tool to Identify malicious PyPI and npm packages

homebrew-core

🍻 Default formulae for the missing package manager for macOS

hyades

Proof-of-concept for decoupling responsibilities from Dependency-Track's monolithic API server into separate, scalable services, based on Apache Kafka.

installcert

Java program to retrieve server certificate that can be added to local keystore

jcs3-slf4j

Log adapter for use with JCS3 to bind to slf4j.

jobrunr

An extremely easy way to perform background processing in Java. Backed by persistent storage. Open and free for commercial use.

juice-shop-assessment

Presentation and code from OWASP AppSec DC 2019 - "Testing With Your Left Foot Forward"