Tools
noir
owasp-noir/noir
OWASP Noir is a static analysis CLI that extracts endpoints, parameters and shadow APIs from source code and exports them for human auditors, LLM auditors or DAST scanners.
Topics
Related projects
dalfox5.4kDalfox is a fast, open-source XSS scanner written in Rust. It automates parameter analysis, reflected, stored and DOM-based XSS detection, WAF fingerprinting and reporting, with a CLI, REST API and MCP server for security testing workflows.
kics2.7kKICS is Checkmarx's open-source scanner for infrastructure-as-code. It uses customizable queries to find security vulnerabilities, compliance issues and misconfigurations in Terraform, Kubernetes, Docker, CloudFormation and many other IaC platforms.
cve-bin-tool1.8kA command-line scanner that finds known CVEs in binaries and SBOMs by detecting bundled components, generating reports and integrating with CI pipelines.
wstg10.3kThe OWASP Web Security Testing Guide, a comprehensive open-source guide and framework for testing web application security.- DevSecOps2.2kDevSecOps is a curated roadmap and resource collection that organizes tools, articles and guidance across the design, develop, build, test, deploy and operate phases.
- DevSecOpsGuideline1.2kThe OWASP DevSecOps Guideline explains how to build a secure CI/CD pipeline, embedding security practices and tools across the SDLC. It is a reference and learning resource for teams adopting shift-left security.