Securibench Micro
Securibench Micro is a series of small test cases designed to exercise different parts of a static security analyzer. Each test case comes with an answer, which simplifies the comparison process. All test cases included in this release can be installed on a standard application server such as Tomcat. Securibench Micro may be used to compare the effectiveness of runtime techniques such as penetration testing tools. These test cases suffer from a variety of vulnerabilities including SQL injection attacks, Cross-site scripting attacks, HTTP splitting attacks, Path traversal attacks, and potentially many others. After years of being hosted at Stanford, we're now moving to Github.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
A tool that automatically audits website security by crawling an entire website and identifying vulnerabilities
Audits JavaScript projects for known vulnerabilities and outdated package versions using OSS Index v3 REST API.
A free and open-source tool for identifying vulnerabilities in Joomla-based websites.
Linux privilege escalation auditing tool for detecting security deficiencies in Linux kernels.
The CVE Program catalogs publicly disclosed cybersecurity vulnerabilities.
A list of vulnerable applications for testing and learning
A tool that finds unprotected secrets in container images or file systems, matching against a database of 140 secret types.
Check for known vulnerabilities in your Node.js installation.
PINNED
Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.