iambrosie

cursed_types

List of Trusted Types bypasses

threat-matrix-cicd

Threat matrix for CI/CD Pipeline

eslint-plugin-no-unsanitized

Custom ESLint rule to disallows unsafe innerHTML, outerHTML, insertAdjacentHTML and alike

turbolift

A simple tool to help apply changes across many GitHub repositories simultaneously

CryptoSlice

Static Analysis of Cryptography in Android Applications

tracy

A tool designed to assist with finding all sinks and sources of a web application and display these results in a digestible manner.

professional-services

Common solutions and tools developed by Google Cloud's Professional Services team. This repository and its contents are not an officially supported Google product.

jwt-secrets

hacker-laws

💻📖 Laws, Theories, Principles and Patterns that developers will find useful. #hackerlaws

security-research

This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.

xsleaks

A collection of browser-based side channel attack vectors.

cloudtracker

CloudTracker helps you find over-privileged IAM users and roles by comparing CloudTrail logs with current IAM policies.

listo

Listo. Use questionnaires and checklists to make it easy to do the right thing, regarding the software you build.

goSDL

goSDL

AttackAESCTR

ttt-ext

Chrome extension to aid in finding DOMXSS by simple taint analysis of string values.

password-manager-resources

A place for creators and users of password managers to collaborate on resources to make password management better.

kubernetes-basicLearning

Understand kubernetes step by step. A simple repo for beginners :fire:

learn-programming-languages

Resources for the working programmer to learn more about the fundamentals and theory of programming languages.

sonic-pi-tool

🎻 Controlling Sonic Pi from the command line

security-crawl-maze

Security Crawl Maze is a comprehensive testbed for web security crawlers. It contains pages representing many ways in which one can link resources from a valid HTML document.

DevSkim

DevSkim is a set of IDE plugins, language analyzers, and rules that provide security "linting" capabilities.

ABD

Course materials for Advanced Binary Deobfuscation by NTT Secure Platform Laboratories

ccls

C/C++/ObjC language server supporting cross references, hierarchies, completion and semantic highlighting

riskquant

threat-model-cookbook

This project is about creating and publishing threat model examples.

go-whatsapp

WhatsApp Web API

playwright

Playwright is a framework for Web Testing and Automation. It allows testing Chromium, Firefox and WebKit with a single API.

secure-mobile-development

A Collection of Secure Mobile Development Best Practices

lockfile-lint

Lint an npm or yarn lockfile to analyze and detect security issues