planetlevel

planetlevel's Stars

• OWASP-Benchmark/BenchmarkJava

  OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually exploitable, it’s a fair test for any kind of vulnerability detection tool. For more details on this project, please see the OWASP Benchmark Project home page.

  Language:Java67156961.1k

• OWASP/www-project-top-10-for-large-language-model-applications

  OWASP Foundation Web Respository

  Language:TeX58991113142

• ESAPI/esapi-java

  Language:Java325481574

• eclipse/jbom

  Language:Java11211136

• Contrast-Security-OSS/contrast-rO0

  A tiny Java agent that blocks attacks against unsafe deserialization

  Language:Java8312215

• planetlevel/jot

  Java Observability Toolkit

  Language:Java619414

• Contrast-Security-OSS/safelog4j

  Safelog4j is an instrumentation-based security tool to help teams discover, verify, and solve log4shell vulnerabilities without scanning or upgrading

  Language:Java4113114

• Contrast-Security-OSS/joogle

  A static analysis API for finding deserialization attack gadgets

  Language:Java38607

• Contrast-Security-OSS/jinfinity

  An API for consuming all the memory of Java apps using deserialization

  Language:Java2810112

• Contrast-Security-OSS/contrastscan-action

  Contrast Scan GitHub action

  191514

• contrastsecurity/contrast

  CodeSec by Contrast - The fastest and most accurate SAST scanner. Scan code and serverless environments

  Language:JavaScript19612

• CycloneDX/sbom-comparator

  Lockheed Martin developed utility to compare two CycloneDX SBOMs

  Language:Java18411

• Contrast-Security-OSS/sheepdog

  Language:Java173569

• Contrast-Security-OSS/docs

  Language:Groovy15373548

• Contrast-Security-OSS/contrast-sca-action

  Contrast SCA GitHub Action

  10723

• Contrast-Security-OSS/meow

  Language:HTML54301

• Contrast-Security-OSS/integration-eks-github-action

  A github action that builds, deploys, and instruments a Contrast Security Agent with an application via Amazon Elastic Kubernetes Service.

  Language:Shell4703

• Contrast-Security-OSS/integration-aks-github-action

  A github action that builds, deploys, and instruments a Contrast Security Agent with an application via Azure Kubernetes Service.

  Language:Shell380

• Contrast-Security-OSS/integration-azure-spring-cloud-github-action

  A github action that deploys and instruments a Contrast Security Agent with an application via Azure Spring Cloud.

  Language:Shell380

• Contrast-Security-OSS/integration-verify-github-action

  GitHub Action to verify an application by determining whether the application violates a job outcome policy or threshold of open vulnerabilities

  Language:Python3724

• planetlevel/spring-petclinic

  Spring PetClinic modified to include vulnerabilities for the purpose of demonstrating the power of IAST and RASP.

  Language:Java1304