Jump to content

CodeSweep - Detect Vulnerabilities While You Code!

cwade12c

By cwade12c,
in Application Security

 Share

Recommended Posts

cwade12c HaxMe Enthusiast

cwade12c

Posted
Posted

HCL AppScan CodeSweep will try to detect vulnerabilities within your code each time you save your code. It comes as a VSCode extension or as a Github Action, so that it will scan code upon a pull request.

fileSaveScanOp

It supports scanning files of the following types:

  • Android-Java
  • Angular
  • Apex
  • ASP.Net
  • C
  • C#
  • Cobol
  • ColdFusion
  • Golang
  • Groovy
  • Infrastructure as Code
  • Ionic
  • JavaScript
  • JQuery
  • Kotlin
  • MooTools
  • NodeJS
  • Objective-C
  • Perl
  • PHP
  • PL/SQL
  • Python
  • React
  • React Native
  • Ruby
  • Scala
  • Swift
  • T-SQL
  • TypeScript
  • VB.Net
  • VueJS
  • Xamarin

VSCode Extension: https://marketplace.visualstudio.com/items?itemName=HCLTechnologies.hclappscancodesweep

Github Action: https://github.com/marketplace/actions/hcl-appscan-codesweep

  • I Like This! 1
  • Interesting! 1
Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share
Go to topic listing

  • Similar Content

    • cwade12c
      Sn1per - All In One Offensive Security Framework
      By cwade12c
      Sn1per is an opensource AIO offensive security framework that includes features such as:
      Attack Surface Discovery Penetration Testing Visual Recon IT Asset Inventory Vulnerability Management Web Application Scans Reporting OSINT Collection Continuous Scan Coverage Domain Takeover Tools There are also many help topics and integration guides listed directly in the README.
      Link to repository: https://github.com/1N3/Sn1per
    • cwade12c
      urlcrazy - Domain Typo Generator
      By cwade12c
      URLCrazy is a domain typo generator that looks useful for testing domain typos and variations, which can have a ton of uses: typo squatting, URL hijacking, phishing, etc. Other use cases might include detecting who is using variations of your domain name (to inform your users), which can help protect your brand and inform your users.

      Link to the repository: https://github.com/urbanadventurer/urlcrazy
    • cwade12c
      Shodan - IoT Recon Toolkit
      By cwade12c
      Shodan is an Internet of Things search engine that allows you to search and scan a wide variety of devices using a wide array of filters. Some will limit their information gathering to things that they see on the web. You can go beyond this, and Shodan is a tool to help with that: phones, controllers, refrigerators, etc. Shodan has powerful dashboards, community curated filters, and a powerful API to let you plug right into their platform.
      Here is a HackerSploit video covering some of the basics of Shodan:
       
      And if you want to check out the engine for yourself...well, here you go!
      Link to website: https://www.shodan.io/
×
×
  • Create New...