MobSF （移动端安全框架）是一个自动化的移动端应用程序(Android/iOS/Windows)安全问题检出的框架和工具，可以进行静态和动态分析的渗透测试，恶意软件分析和安全评估
The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
cwe_checker finds vulnerable patterns in binary executables
The Correlated CVE Vulnerability And Threat Intelligence Database API
OSINT tool - gets data from services like shodan, censys etc. in one app
Corax for Java: A general static analysis framework for java code checking.
Vulnogram is a tool for creating and editing CVE information in CVE JSON format
Generate a MITRE ATT&CK Navigator based on a list of CVEs. Database with CVE, CWE, CAPEC, and MITRE ATT&CK Techniques data is updated daily.
Open-Source Vulnerability Intelligence Center - Unified source of vulnerability, exploit and threat Intelligence feeds
The goal of this project is to provide additional features on top of the existing npm audit options
Python API for vFeed Vulnerability & Threat Intelligence Database Enterprise & Pro Editions
"Linking Threat Tactics, Techniques, and Patterns with Defensive Weaknesses, Vulnerabilities and Affected Platform Configurations for Cyber Hunting" by Erik Hemberg, Jonathan Kelly, Michal Shlapentokh...
Collection of CVEs from Sick Codes, or collaborations on https://sick.codes security research & advisories.
Repository for "SecurityEval Dataset: Mining Vulnerability Examples to Evaluate Machine Learning-Based Code Generation Techniques" published in MSR4P&S'22.
Open Source Tool - Cybersecurity Graph Database in Neo4j
A command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration.
FastCVE: A Dockerized CVE search tool with API and CLI support for security vulnerability queries.
Development of the NIST vulnerability data ontology (Vulntology).
#学习与技能提升#WebGoat.NETCore - port of original WebGoat.NET to .NET Core
Daily archiver & triage issue creator for new releases of CISA's Known Exploited Vulnerabilities list