software-security topic

Keyshuffling Attack for Persistent Early Code Execution in the Nintendo 3DS Secure Bootchain

Plailect

A simple Java command-line utility to mirror the CVE JSON data from NIST.

stevespringett

A Java library for parsing and programmatically using threat models

stevespringett

A simple Java command-line utility to mirror the entire contents of VulnDB.

stevespringett

SBT Plugin for OWASP DependencyCheck. Monitor your dependencies and report if there are any publicly known vulnerabilities (e.g. CVEs). :rainbow:

albuch

Gather and update all available and newest CVEs with their PoC.

trickest

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

DependencyTrack

Integrates Dependency-Check reports into SonarQube

dependency-check

《macOS软件安全与逆向分析》随书源码

feicong

OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction. SBOM, SaaSBOM, HBOM, AI/ML-BOM, CBOM, OBOM, MBOM, VDR, and V...

CycloneDX