SMT solver 기반 보안 약점 분석

📦 Better NPM Audit drop in replacement. Always mirrors the latest version. Patched to behave more consistently in `offline=true` environments and be slightly less verbose. — `npm install better-npm-audit@github:EIGHTFINITE/better-npm-audit#main` — https://github.com/EIGHTFINITE/better-npm-audit/tags | https://github.com/jeemok/better-npm-audit

A CWE-Expert can be built for free in a browser in less than 1 minute using the instruction and CWE Corpus files provided here.

GetSubDomains is a fast and efficient Bash tool for retrieving subdomains of a given domain using the crt.sh certificate transparency logs. This tool is useful for security researchers, penetration testers, and bug bounty hunters to quickly enumerate subdomains with minimal overhead.

An explorer that allows you to see the multiple relationships of a CWE (and their details)

📚 GDG DevFest Cerrado 2025: Talk Reference and Study Material

1st Project for the Security in Organizations class 2021/2022

An AI-powered code vulnerability scanner in Python. It can scan code locally using Ollama or use cloud-based AI models via API. Built as an experiment in combining local and remote AI for security analysis.

Various prompt templates for automatic program repair using LLMs

A reusable GitLab CI/CD template for automated security scanning, including secrets detection (Gitleaks, Trufflehog), dependency vulnerabilities (Trivy), SAST (Semgrep, SonarQube), DAST (OWASP ZAP), and a consolidated security dashboard. Include this in your gitlab-ci.yml for DevSecOps.

In-memory database of CVEs created from a local cache of https://github.com/CVEProject/cvelistV5

From Prompts to Agents: A Multi-Perspective Evaluation of Large Language Models for File-Level Software Vulnerability Detection and Repair

OWASP Top 10 category from CWE

We present a detailed vulnerability dataset of 24,285 Apache libraries, totaling 574,581 JARs, 1,285 CVEs, and 157 CWEs.

An R package for building forecasting models using data from National Vulnerability Database (NVD).

A tiny crate to access a strongly typed common weakness enumeration (cwe) object. Everything is ready to use at compile time, no further setup or network calls at runtime are required.

National Vulnerability Database (NVD) implemented by rust

A tool to calculate the CVSS score and the bounty amount of a vulnerability from its Owasp description

OWL/XML ontology for CWE