Whispers
0
Free
Whispers is a static code analysis tool designed for parsing various common data formats in search of hardcoded credentials and dangerous functions. Whispers can run in the CLI or you can integrate it in your CI/CD pipeline. It detects Passwords, API tokens, AWS keys, Private keys, Hashed credentials, Authentication tokens, Dangerous functions, and Sensitive files. Whispers supports formats like YAML, JSON, XML, .npmrc, .pypirc, .htpasswd, .properties, pip.conf, conf/ini, Dockerfile, Dockercfg, Shell scripts, Python3, JavaScript, Java, Go, PHP, AWS credentials files, JDBC connection strings, Jenkins config files, SpringFramework Beans config files, Java Properties files, Dockercfg private registry auth files, and Github tokens. Python3 files are parsed as ASTs because of native language support. Whispers is intended to be a structured text parser, not a code parser.
FEATURES
The author has not provided features for this tool yet. If you are the author, please sign in or claim the tool to add features by clicking the icon above.
ALTERNATIVES
Protect your Fastify server against CSRF attacks with a series of utilities and recommendations for secure application development.
Mitigate security concerns of Dependency Confusion supply chain security risks.
Detect trojan source attacks that employ unicode bidi attacks to inject malicious code.
A tool for identifying potential security vulnerabilities in web applications
StepSecurity is a platform that enhances GitHub Actions security by providing network egress control, risk discovery, action replacement, and security best practices orchestration.
Commercial
Runtime application security platform that provides vulnerability management, patching, and threat detection at the application level during program execution.
Commercial
ffufai is an AI-enhanced wrapper for ffuf that automatically suggests file extensions for web fuzzing based on the target URL and headers.
Guidelines for secure coding in Java SE to avoid bugs that could weaken security and open holes in Java's security features.
PINNED
InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Commercial
Resources
Fabric Platform by BlackStork
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
Free
Security Operations
Mandos Brief Newsletter
Stay ahead in cybersecurity. Get the week's top cybersecurity news and insights in 8 minutes or less.
Free
Blogs and News
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
Commercial
Cloud Security
RoboShadow
A cybersecurity platform that offers vulnerability scanning, Windows Defender and 3rd party AV management, and MFA compliance reporting, among other features.
Commercial
Vulnerability Management
Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.
Commercial
AI Security