Ruby · jeremylongshore/tons-of-skills-marketplace

Analyze dependencies for known security vulnerabilities and outdated versions.

jeremylongshore/tons-of-skills-marketplace

Scan a source tree for command-injection vulnerable patterns: shell=True calls in Python subprocess, os.system / os.popen with interpolated strings, Node childprocess.exec with template literals…

jeremylongshore/tons-of-skills-marketplace

Scan a source tree for dynamic-code-execution APIs that an attacker can hijack: Python eval / exec / compile, JavaScript eval / Function() / setTimeout(string), Ruby eval / instanceeval / classeval…

jeremylongshore/tons-of-skills-marketplace

Scan a source tree for unsafe-by-default deserialization APIs: Python pickle.loads / cPickle / shelve / dill, Ruby Marshal.load / YAML.load (pre-3.1 default), Java ObjectInputStream.readObject, PHP…

jeremylongshore/tons-of-skills-marketplace