open clover sandbox

SAST_DAST_examples for Fortify and Webinspect

Tests dynamiques de sécurité (DAST) sous OWASP Zap avec authentification via JWT/bearer token (OpenID Connect/OAuth & Kong)

Browser extension used to record login and navigation sequences.

Learn DevSecOps with this Demo Application.

Jenkins Pipeline for security scanning with owasp zap

zap api scan githubactions

blackduckcopilot

zap full githubactions

An implementation of infrastructure-as-code scanning using dynamic tooling.

An ongoing & curated collection of awesome vulnerability scanning software, libraries and frameworks, best guidelines, technical resources and most important static application security testing (SAST)

codecov

An ongoing & curated collection of awesome vulnerability scanning software, libraries and frameworks, best guidelines and technical resources and most important dynamic application security testing (DAST)

Automates the function name extraction from the list of CVEs of a given SOUP and perform search operation against the static and dynamic function trace database.

Cross-platform test harness that assists the user in searching for vulnerabilities in web browsers, specifically by fuzzing their font parsing functionality.

Suite of web browser fuzzing tools aimed at optimising code coverage. Test case generation from a built-in Context-Free Grammar, mutation fuzzing from a corpus of scraped web pages, DOM fuzzing and more.

Sample Python script for automating WebInspect scans and pushing results to SSC

Enabling and configuring security gates for a spring boot application.

Streaming Platform - Development