source-code-analysis

4 tools and resources

NEW

A free online tool to scan for DOM-based XSS vulnerabilities in HTML, JavaScript, and CSS files.

Insider is a source code analysis tool focusing on OWASP Top 10 vulnerabilities with easy integration into DevOps pipelines.

A disclosure of a bug found in Twitter's Vine and the process of procuring the source code.

A vulnerable web site in NodeJS for testing security source code analyzers.