583 Open source projects that are alternatives of or similar to Dagda

SBT Plugin for OWASP DependencyCheck. Monitor your dependencies and report if there are any publicly known vulnerabilities (e.g. CVEs). 🌈

Vulnerability Static Analysis for Containers

A vulnerability scanner for container images and filesystems

Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.

A service that analyzes docker images and applies user-defined acceptance policies to allow automated container image validation and certification

A static analysis security vulnerability scanner for Ruby on Rails applications

Making CoreOS' Clair easily work in CI/CD pipelines

Python script to detect vulnerabilities inside PHP source code using static analysis, based on regex

WEB SERVICE SECURITY ASSESSMENT TOOL

Performing security tests inside your CI

Kubernetes security notes and best practices

Performant type-checking for python.

A vulnerable version of Rails that follows the OWASP Top 10

☕️ SonarSource Static Analyzer for Java Code Quality and Security

Dockerfile linter, validate inline bash, written in Haskell

A template for modern C++ projects using CMake, Clang-Format, CI, unit testing and more, with support for downstream inclusion.

a javascript static security analysis tool

ShellCheck, a static analysis tool for shell scripts

scalastyle

library for importing functions from dlls in a hidden, reverse engineer unfriendly way

Awesome autocompletion, static analysis and refactoring library for python

🆕 The Multi-Tool Web Vulnerability Scanner.

Awesome Python Security resources 🕶🐍🔐

Continuous Inspection

Collection of small security tools, mostly in Bash and Python. CTFs, Bug Bounty and other stuff.

A LLVM-based static analysis framework.

Code style checking for RSpec files

Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.

An analysis tool for Python that blurs the line between testing and type systems.

OSS-Fuzz - continuous fuzzing for open source software.

Phan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.

SonarSource Static Analyzer for JavaScript and TypeScript

Next-gen phpDoc parser with support for intersection types and generics

Open-Source Security Architecture | 开源安全架构

Vulnerability Patterns Detector for C# and VB.NET

Proof of Concept of ESP32/8266 Wi-Fi vulnerabilties (CVE-2019-12586, CVE-2019-12587, CVE-2019-12588)

A GitHub app to automatically review Python code style over Pull Requests

Linux Binary Exploitation

Static Value-Flow Analysis Framework for Source Code

A collection where my current and future writeups for exploits/CTF will go

🎖safely* install packages with npm or yarn by auditing them as part of your install process

A curated list of awesome Go linters. More than 60 linters and tools!

Useful CMake Examples

Catch common Java mistakes as compile-time errors

.git 泄漏利用工具，可还原历史版本

Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.

PHP Architecture Tester - Easy to use architectural testing tool for PHP ✔️

Emacs Lisp Static Analyzer

kernel privilege escalation enumeration and exploitation framework

Scalable fuzzing infrastructure.

IDAPython Made Easy

Static code analyzer for TypeScript

Examples of Solidity security issues

HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.

Collection of malware source code for a variety of platforms in an array of different programming languages.

Android Reverse-Engineering Workbench for VS Code

Andromeda - Interactive Reverse Engineering Tool for Android Applications

🔐 A code style linter for Elixir

FlowDroid Static Data Flow Tracker

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.