A database of vulnerable Ruby Gems

A database of vulnerable Ruby Gems

Patch-level verification for Bundler

iodine - HTTP / WebSockets Server for Ruby with Pub/Sub support

AI-powered Docker security scanner that explains vulnerabilities in plain English. An OWASP Incubator Project.

Public roadmap for rubygems.org. Open issues, follow along, and weigh in on the direction of the registry.

Rails 5 version of atlrug2

YAML linter that preserves comments using psych-pure. Detects issues and fixes formatting without destroying documentation.

A vulnerable version of Rails that follows the OWASP Top 10

Updated version of "Kwalify is a parser, schema validator, and data binding tool for YAML and JSON"

schema validator and data binding for YAML/JSON

CEREBRO-RED v2: Advanced LLM Red Team Research Platform with PAIR Algorithm and LLM-as-a-Judge Evaluation

Ruby enVironment Manager (RVM)

A micro-framework and tool for performing reconnaissance.

Third-party git repository support for ronin.

A Ruby micro-framework for writing and running exploits

A common database library for managing and querying security data

Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git …

new project - to test README file

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

This is Sherlock's sister, Modern shiny CLI tool written with Golang to help you: 🔎 Hunt down social media accounts by username across social networks

🎄 Giving back to open source for the holidays

A Rails 7 application for exploring vulnerable usages of Active Record methods.

Bitwarden client apps (web, browser extension, desktop, and cli).

PortScout: Fast and Reliable Port Scanning Made Simple

Setler lets you use the 'Feature Flags' pattern or add settings to models in Rails

RSpec for Rails 7+

APIs for the k-anonymity Pwned Passwords implementation

Standalone sdoc generator

This tool aims at automating the identification of potential service running behind ports identified manually either through manual scan or services running locally. The tool is useful when nmap or…