Sam Stepanyan's repositories
nettacker-automation
OWASP Nettacker Automation Examples
OWASP-Nettacker
Automated Penetration Testing Framework
ai-creations
content created by AI
gh-workflow-auditor
Script to audit GitHub Action Workflow files for potential vulnerabilities.
github-oidc-checker
Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts
goctopus
Blazing fast GraphQL discovery & fingerprinting toolbox.
grype
A vulnerability scanner for container images and filesystems
nodejs-goof
Super vulnerable todo list application
osv-scanner
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
owasp.github.io
OWASP Foundation main site repository
pinny
Pin your 3rd Party Github Actions and Docker Images dependencies.
repository-scanner
Tool to detect secrets in source code management systems.
SafePackage
safe-package is a security wrapper for your package manager
sbom-action
GitHub Action for creating software bill of materials using Syft.
secrets-detection
Code samples and recipes related to detecting secrets across development environments and related systems.
secure-sw-dev-fundamentals
Secure Software Development Fundamentals courses (from the OpenSSF Best Practices WG)
Sirius
open-source general purpose vulnerability scanner (fork)
SwaggerJacker
A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.
syft
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
TicTaaC
Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. Sugar-Free and Secure: no any external dependencies except for chart plotting are used
vulnerablecode
A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/
Wordpresscan
WPScan rewritten in Python + some WPSeku ideas
www-committee-chapter
OWASP Foundation Web Respository
www-project-top-10-for-large-language-model-applications
OWASP Foundation Web Respository