lyvd

javascript-obfuscator

A powerful obfuscator for JavaScript and Node.js

semgrep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

bandit

Bandit is a tool designed to find common security issues in Python code.

cosign

Code signing and transparency for containers and binaries

black-hat-rust

Applied offensive security with Rust - https://kerkour.com/black-hat-rust

digital-forensics-lab

Free hands-on digital forensics labs for students and faculty

safety-db

A curated database of insecure Python packages

javascript-malware-collection

Collection of almost 40.000 javascript malware samples

images

Public Chainguard Images

aura

Python source code auditing and static analysis on a large scale

Python-Honeypot

OWASP Honeypot, Automated Deception Framework.

security-labs-pocs

Proof of concept code for Datadog Security Labs referenced exploits.

bincapz

detect malicious program behaviors

hijagger

Checks all maintainers of all NPM and Pypi packages for hijackable packages through domain re-registration

top-pypi-packages

A regular dump of the most-downloaded packages from PyPI

malicious-packages

A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerability (OSV) format.

research

Bug Bounty writeups, Vulnerability Research, Tutorials, Tips&Tricks

PracticalMalwareLabs

Keep track of the labs from the book "Practical Malware Analysis"

hacks-leaks-and-revelations

Code that goes along with the Hacks, Leaks, and Revelations book

ossmalware

js-malicious-dataset

This repository contains a list of pseudo-sorted malicious JavaScripts collected from time to time.

gh-action-pip-audit

A GitHub Action for pip-audit

ATI

Ixia ATI team open source or generally public material. Anything added here MUST be approved by Ixia Management.

DamnVulnerableMicroServices

This is vulnerable microservice written in many language to demonstrating OWASP API Top Security Risk (under development)

translator

software_supply_chain_papers

This repository contains a list of papers about software supply chain

bandit4mal

A fork of Bandit tool with patterns to identifying malicious python code.

malware-static-analysis

Static malware analysis using python

bad-snakes-icse23-artifacts

The Artifacts for ICSE 2023 paper: Bad Snakes: Understanding and Improving Python Package Index Malware Scanning

taming-bad-python-packages-blog-post

This repository contains the source code and data for the blog post "Taming Bad Python Packages Assessing Python Malware Detectors with a Benchmark Dataset"