Patch-level verification tool for bundler that checks for vulnerable versions of gems in Gemfile.lock and insecure gem sources, allows ignoring certain advisories, and prints advisory information without requiring a network connection.
FEATURES
ALTERNATIVES
An extensible, heuristic-based vulnerability scanning tool for installed npm packages.
A JavaScript scanner built in PHP for scraping URLs and other information.
Automate Google Hacking Database scraping and searching with Pagodo, a tool for finding vulnerabilities and sensitive information.
CSET is a free software tool for identifying vulnerabilities in enterprise and industrial control cyber systems.
Vulnerable web application for beginners in penetration testing.
TANNER is a remote data analysis and classification service for evaluating HTTP requests and composing responses for SNARE.
A list of vulnerable applications for testing and learning
PINNED
Fabric Platform by BlackStork
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
Mandos Brief Newsletter
Stay ahead in cybersecurity. Get the week's top cybersecurity news and insights in 8 minutes or less.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.