owasp-noir/noir

Remove always-true `match.size > 0` guards in `koa.cr` 9 days ago

🔬 analyzer good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Rename `golang_spec.cr` to match the `*_lexer_spec.cr` naming in minilexer/ 9 days ago

💊 spec 🥢 mini-lexer good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Remove always-true `match.size > 0` guards in `express.cr` 9 days ago

🔬 analyzer good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Remove always-true `match.size > 0` guards in `restify.cr` 9 days ago

🔬 analyzer good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Add a functional tester for the Vercel specification analyzer about 1 month ago

💊 spec good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Use `unless x.nil?` instead of `if !x.nil?` at the six remaining plain sites about 1 month ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Add a spec for the shared `PrefixScope.prefix_covers?` tagger helper about 1 month ago

💊 spec good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Add the four missing `--set-pvalue-*` rows to the v1 flag-consolidation table about 1 month ago

📑 documentation good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Document the `--no-spinner` flag in the Running page flag table about 1 month ago

📑 documentation good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Use `Hash#has_value?` instead of `.values.includes?` in the JS and Ktor extractors about 1 month ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

`Token#to_s` rewrites the token’s own `value` as a side effect about 1 month ago

🐞 bug good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Remove the 41 always-true `match.size > 0` guards in the JS route extractor about 1 month ago

🥢 mini-lexer good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Move the php / csharp mini-lexer specs into spec/unit_test/minilexer/ about 1 month ago

💊 spec good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Merge the two scala_lexer_spec.cr files that both describe Noir::ScalaLexer about 1 month ago

💊 spec good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Remove the dead 93-line extract_handler_params_from_content in the restify JS analyzer about 1 month ago

🔬 analyzer good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Remove three dead private methods left behind in the C# ASP.NET Core MVC analyzer about 1 month ago

🔬 analyzer good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Introduce Analyzer::Clojure::Helper for the four s-expression scanners duplicated across all five Clojure analyzers about 1 month ago

🔬 analyzer good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Refresh the stale language / framework counts in README and on the docs site about 2 months ago

📑 documentation good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Consolidate the duplicated Python extract_python_string into Analyzer::Python::Helper about 2 months ago

🔬 analyzer good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Add unit specs for Noir::ScalaLexer about 2 months ago

💊 spec 🥢 mini-lexer good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

CLI ERROR messages are colorized yellow, the same as WARNING about 2 months ago

⚙️ options good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Use idiomatic .empty? instead of .size == 0 / .size != 0 about 2 months ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Document --export-opensearch, --export-webhook and --tls-skip-verify on the Deliver page about 2 months ago

📑 documentation good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Consolidate the duplicated Dart line_for_offset / find_matching_paren helpers into Analyzer::Dart::Helper about 2 months ago

🔬 analyzer good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Consolidate the duplicated Haskell `strip_haskell_comments` into a shared `Analyzer::Haskell::Helper` 2 months ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Consolidate the duplicated camelCase-to-underscore `underscore` helper used by the Perl analyzers 2 months ago

🔬 analyzer good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Consolidate the duplicated Java `join_paths(prefix, suffix)` path-joiner into a shared `Analyzer::Java::Helper` 2 months ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Remove four unused private methods in the JS route miniparser (js_parser.cr) 3 months ago

🥢 mini-lexer good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Document the remaining 10 GitHub Action inputs (ai_*, probe, export_*, diff_path, no_log) in the Action docs page 3 months ago

📑 documentation good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Extract the hardcoded AI-context label-length cap (64) to a named constant in pattern_matcher.cr 3 months ago

good first issue 🧩 ai-context

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Extract the agent grep-snippet truncation length (220) to a named constant in unified_ai.cr 3 months ago

🤖 ai-analyzer good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Add a direct spec for the `AIContext` bucket dedup + per-section cap 3 months ago

💊 spec good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Add a spec for the global `join_path` path-join helper in `src/utils/utils.cr` 3 months ago

💊 spec good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Document the `noir cache purge <days>` action on the CLI Commands page 3 months ago

📑 documentation good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

`ENV.keys.includes?` -> `ENV.has_key?` in the ZAP deliver model 3 months ago

💌 deliver good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Remove three unused private methods across php/symfony and ruby/rails analyzers 3 months ago

🔬 analyzer good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Remove the unused per-method route scanner cluster in the restify JS analyzer 3 months ago

🔬 analyzer good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Remove the dead legacy route-line scanner in the fasthttp Go analyzer (post tree-sitter migration) 3 months ago

🔬 analyzer good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Consolidate the byte-identical Python slash-collapse `normalize_path` + `join_paths` helpers (sanic / bottle / aiohttp) into a shared module 3 months ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Consolidate the duplicated Perl `sanitize_perl_lines` POD/`__END__` stripper into a shared helper 3 months ago

🔬 analyzer good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Correct the `--techs` description and add `--only-techs` on the "Managing Technology Scopes" page 3 months ago

📑 documentation good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Use idiomatic `unless x.nil?` instead of `if !x.nil?` across the analyzers 3 months ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Reuse the existing ALLOWED_HTTP_METHODS constant instead of an inline HTTP-method list in Deliver 3 months ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Add debug logging to silent rescue blocks in the specification detectors 3 months ago

🔎 detector good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Add debug logging to silent rescue blocks in the specification analyzers 3 months ago

🔬 analyzer good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Remove unused leftover constants across the analyzers (APIGW_RESTAPI_TYPE, VERB_TO_METHOD, REGEX_ROUTE_MAPPING, and others) 3 months ago

🔬 analyzer good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Add a unit spec for the Noir::PathScope path-boundary utility module 3 months ago

💊 spec good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Add debug logging to bare rescue blocks in unified_ai analyzer 4 months ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Use idiomatic .empty? instead of .size > 0 in send_proxy 4 months ago

💡 enhancement 💌 deliver good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Use idiomatic .empty? instead of == "" / != "" for empty-string checks 4 months ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Use idiomatic match check instead of `match(...) != nil` in analyzers 5 months ago

💡 enhancement 🔬 analyzer good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Remove empty `Details#initialize` method in endpoint.cr 6 months ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Miniparsers use `puts` for debug output instead of logger 6 months ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

GraphQL analyzer uses STDERR.puts instead of logger 6 months ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Consolidate duplicate Endpoint initializers using default parameters 6 months ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Remove unnecessary `require "regex"` in graphql_analyzer.cr 6 months ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Add error logging to bare rescue blocks in llm/cache.cr 6 months ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Add error logging to bare rescue blocks in config_initializer.cr 6 months ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Add error logging to bare rescue in send_req.cr 6 months ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Use idiomatic .empty? instead of .size > 0 across the codebase 6 months ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Extract hardcoded error truncation length to a constant in LLM client 6 months ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Extract hardcoded max file size to a named constant in media_filter 6 months ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Mermaid output builder ignores passive_results parameter 6 months ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Passive scan regex compilation failures are silently ignored 6 months ago

💡 enhancement 🚔 passive-scan good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

File-based analyzer log message doesn't pluralize 'hook' 6 months ago

💡 enhancement 🔬 analyzer good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Typo in test description: 'suffled' → 'shuffled' 6 months ago

💡 enhancement 💊 spec good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Elasticsearch deliver has outer bare rescue that silently swallows errors 6 months ago

🐞 bug 💌 deliver good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

OAS2 analyzer maps 'form' param type to 'json' incorrectly 6 months ago

🐞 bug 🔬 analyzer good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

JSP analyzer contains PHP superglobals in allow_patterns (copy-paste) 6 months ago

🐞 bug 🔬 analyzer good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Open Issues Need Help