#Software-security
Showing 16 of 16 repositories tagged #software-security, ranked by stars
Gather and update all available and newest CVEs with their PoC.
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
Asset inventory of over 800 public bug bounty programs.
Integrates Dependency-Check reports into SonarQube
《macOS软件安全与逆向分析》随书源码
SBT Plugin for OWASP DependencyCheck. Monitor your dependencies and report if there are any publicly known vulnerabilities (e.g. CVEs). :rainbow:
Find CVE PoCs on GitHub
Jenkins plugin for OWASP Dependency-Check. Inspects project components for known vulnerabilities (e.g. CVEs).
Trickest Workflow for discovering log4j vulnerabilities and gathering the newest community payloads.
Integrates OWASP Zed Attack Proxy reports into SonarQube
Solutions and discussions from the Software Security course on Coursera. Open for collaboration and knowledge sharing.
A practical, research-friendly toolkit demonstrating how Python can read, parse, and analyze Solidity smart contracts using feature-engineering techniques. Extracts structural and security-relevant signals from Solidity code, detects risky patterns, builds interpretable features, and forms the basis for heuristic or ML-driven security analysis.
List of Public Bug Bounty and Responsible Disclosure Programs
Automated compromise detection of the world's most popular packages
CTF Writeups Backup
《macOS软件安全与逆向分析》勘误