Pinned Loading

1. vulncov vulncov Public

   🧪 Correlate Semgrep scans with Python test coverage to prioritize SAST findings and get bug fix suggestions via a self-hosted LLM.

   Python 42 1

2. STRIDE-vs-ASVS STRIDE-vs-ASVS Public

   🖇️ equivalence table between OWASP ASVS standard and STRIDE threat modeling methodology.

   76 3

3. gitpaths gitpaths Public

   🗺️ Lists the folder structure of a GitHub repo without cloning it to create ad hoc fuzzing wordlists.

   Go 1

4. dvwa-modsec-arena dvwa-modsec-arena Public

   🧱 A local arena to practice breaking ModSecurity WAF (OWASP CRS) against DVWA.

   Shell

5. SecurityRAT-ASVS-Importer SecurityRAT-ASVS-Importer Public

   🐀 Import ASVS controls to SecurityRAT in the blink of an eye.

   Awk 3 1

6. auto-abuse-asvs auto-abuse-asvs Public archive

   🥊 Automagically select the top ASVS security controls for a given Abuse Case using NLP.

   Jupyter Notebook 6