Protect your Fastify server against CSRF attacks with a series of utilities and recommendations for secure application development.
#apparmor tools
24 results
A tool to conduct preliminary security checks in code, infrastructure, or IAM configurations using various open-source tools.
Custom AppArmor profile generator for Docker containers with file globbing.
A company that helps organizations create security-aware teams and produce bug-free software.
A collection of real-world scenarios to evaluate command injection detection and exploitation abilities
A collection of Android Fakebank and Tizi samples for analyzing spyware on Android devices.
A web-based tool for instrumenting and analyzing Android applications using Flask, Jinja, and Redis.
Utilizes dirtyc0w kernel exploit for privilege escalation in a Docker container.
DueDLLigence is an open-source tool for identifying and analyzing DLL hijacking vulnerabilities in Windows applications, providing automated analysis and remediation guidance.
A Python-based tool for identifying and exploiting file inclusion and directory traversal vulnerabilities in web applications.
Firejail is a SUID sandbox program for restricting the running environment of untrusted applications on Linux.
Hackazon is a free, vulnerable test site with an online storefront to train and test IT security professionals on various vulnerabilities like SQL Injection and cross-site scripting.
Comprehensive security training platform for web developers, offering hands-on experience with real, vulnerable applications and concrete advice for securing code.
A comprehensive guide to hardening OpenLDAP on Linux using AppArmor and systemd, providing a defense in depth approach to securing LDAP deployments.
Inceptor is a template-driven framework for evading Anti-Virus and Endpoint Detection and Response solutions, allowing users to create custom evasion techniques and test their security cont…
A Burp extension to detect alias traversal via NGINX misconfiguration at scale.
A web application security testing platform that helps you test your knowledge on web application security through realistic scenarios with known vulnerabilities.
A quick and dirty dynamic redirect.rules generator for penetration testers and security professionals.
A series of small test cases designed to exercise different parts of a static security analyzer
Learn how to secure applications in Kubernetes Engine by granting varying levels of privilege based on requirements.
Snyk Code is a real-time SAST tool that provides secure code analysis and actionable remediation advice to prevent code delays and ensure secure development.
Mitigate security concerns of Dependency Confusion supply chain security risks.
VIDOC is an AI-powered security tool that automates code review, detects and fixes vulnerabilities, and monitors external security, ensuring the integrity of both human-written and AI-gener…
Hidden parameters discovery suite