Hardened malloc
This is a security-focused general purpose memory allocator providing the malloc API along with various extensions. It provides substantial hardening against heap corruption vulnerabilities. It aims to provide decent overall performance with a focus on long-term performance and memory usage rather than allocator micro-benchmarks. It offers scalability via a configurable number of entirely independent arenas, with the internal locking within arenas further divided up per size class. This project currently supports Bionic (Android), musl and glibc. It may support other non-Linux operating systems in the future.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
A serverless application that demonstrates common serverless security flaws and weaknesses
QIRA is a competitor to strace and gdb with MIT license, supporting Ubuntu and Docker for wider compatibility.
Emulates browser functionality to detect exploits targeting browser vulnerabilities.
Automatic authorization enforcement detection extension for Burp Suite
Runtime application security platform that provides vulnerability management, patching, and threat detection at the application level during program execution.
A honeypot trap for Symfony2 forms to reduce spam submissions.
ARM TrustZone provides a secure execution environment for applications on ARM processors.
An API security platform that provides automated discovery, documentation, and continuous security testing throughout the API lifecycle.
PINNED
Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.