Security-automation Libraries

17 Components & Libraries

Sortby

Security-automation Libraries

:shell: Python-powered, cross-platform, Unix-gazing shell.

Install xonsh from pip: The xonsh shell is developed by a community of volunteers. There are a few ways to help out: We welcome new contributors!

DevSecOps, ASPM, Vulnerability Management. All on one platform.

DefectDojo is maintained by: Core Moderators can help you with pull requests or feedback on dev ideas: Moderators can help you with pull requests or feedback on dev ideas:

Automated Security Testing For REST API's

REST API penetration testing is complex due to continuous changes in existing APIs and newly added APIs. Astra can be used by security engineers or developers as an integral part of their process, so…

The SOC Analysts all-in-one CLI tool to automate and speed up workflow.

Sooty is a tool developed with the task of aiding SOC analysts with automating part of their workflow. One of the goals of Sooty is to perform as many of the routine checks as possible, allowing the …

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 200 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

CVE Binary Tool uses the NVD API but is not endorsed or certified by the NVD. The tool has two main modes of operation: It is intended to be used as part of your continuous integration system to enab…

Automated Penetration Testing Reporting System

The tool has been tested using Python 3.8.10 on Kali Linux 2022.2/3, Ubuntu 20.04.5 LTS, Windows 10/11. Windows Installation Linux Installation Windows Linux This project is supported by:

Performing security tests inside your CI

Developers can set up a new stage into their CI pipelines to check for vulnerabilities: If security issues are found in the code, the severity, the confidence, the file, the line, and many more usefu…

Burp-Automator: A Burp Suite Automation Tool with Slack Integration. It can be used with Jenkins and Selenium to automate Dynamic Application Security Testing (DAST).

A Burp Suite Automation Tool

Finds security holes in your Python projects from PyCharm and GitHub

A plugin to run security checks for common flaws in Python code and suggest quick fixes. Check out the webinar for a full demo of the functionality in this plugin: This plugin will check the installe…

Web Scan Lazy Tools - Python Package

The OSINT Omnibus (beta release)

By providing an easy to use interactive command line application, users are able to create sessions to investigate various artifacts such as IP addresses, domain names, email addresses, usernames, fi…

The CrowdStrike Falcon SDK for Python

The FalconPy SDK contains a collection of Python classes that abstract CrowdStrike Falcon OAuth2 API interaction, removing duplicative code and allowing developers to focus on just the logic of their…

This project consists of an open source library allowing software to connect to data repositories using STIX Patterning, and return results as STIX Observations.

STIX-shifter is an open source python library allowing software to connect to products that house data repositories by using STIX Patterning, and return results as STIX Observations. This library tak…

Code from Blackhat Python book

Burp Automator - A Burp Suite Automation Tool. It provides a high level CLI and Python interfaces to Burp Suite scanner and can be used to setup Dynamic Application Security Testing (DAST).

The original repo seemed abandoned, but I would be happy to merge back the changes to upstream version! A Burp Suite Automation Tool. It provides a high level CLI and Python interfaces to Burp Suite …

python dependency vulnerability scanner, written in Rust.

or As of October 15, 2023: While not coding, I am a broke high school student with nothing else to do. I appreciate all the help I can get.

NebulousAD automated credential auditing tool.

The code for checking Active Directory passwords against a set of publicly breached authentication credentials will continue to live on in this repository, and we will be incorporating all the excell…

Related tags