Skip to content

@Santandersecurityresearch Santander Security Research

Change the repository type filter

All

    Repositories list

    21 repositories

    • TLS-Data-Gatherer

      Public
      Data gathering tool for TLS Qualys reports - current focus is on Apache HTTP Server. It retrieves data from CIDs 1606, 9798, 9799, 19505, 7640, 10838 and 10840. Resources
      Python
      •
      GNU General Public License v3.0
      •0•0•1•2•Updated Jul 14, 2025Jul 14, 2025

    • cbom-action

      Public
      Create a Crypto Bill of Materials using CodeQL
      Python
      •
      MIT License
      •16•0•0•1•Updated Jun 22, 2025Jun 22, 2025

    • cryptobom-forge

      Public
      Tools and utilities needed to parse GitHub Multi-Repository Variant Analysis output
      Python
      •
      GNU General Public License v3.0
      •7•21•2•5•Updated Jun 19, 2025Jun 19, 2025

    • CryptoMon

      Public
      Network Cryptography Monitor - using eBPF, written in python
      pythoncryptographyebpf
      Python
      •
      GNU General Public License v3.0
      •2•34•5•0•Updated Jun 17, 2025Jun 17, 2025

    • cryptoinventory.datamodel

      Public
      A Data Model Poc for Crypto Inventory for the Europol Quantum Safe Financial Forum (QSFF)
      Shell
      •0•4•2•0•Updated May 5, 2025May 5, 2025

    • ASVS-Standard

      Public
      Application Security Verification Standard
      HTML
      •
      Creative Commons Attribution Share Alike 4.0 International
      •752•0•0•0•Updated Mar 14, 2025Mar 14, 2025

    • PQCTools

      Public
      PQC Transition Tools Index
      GNU General Public License v3.0
      •12•32•0•0•Updated Mar 14, 2025Mar 14, 2025

    • e-Skimming-Detection

      Public
      Semgrep Rules for Detecting Magecart Skimmers and Obfuscated JavaScript
      HTML
      •1•9•0•0•Updated Mar 5, 2025Mar 5, 2025

    • asvs

      Public
      A simple web app that helps developers understand the ASVS requirements.
      owaspasvsdjangomarbles
      HTML
      •
      MIT License
      •42•158•4•0•Updated Feb 26, 2025Feb 26, 2025

    • DrHeader

      Public template
      drHEADer helps with the audit of security headers received in response to a single request or a list of requests.
      Python
      •
      MIT License
      •28•110•9•5•Updated Jan 8, 2025Jan 8, 2025

    • CheatSheetSeries

      Public
      The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
      Python
      •
      Creative Commons Attribution Share Alike 4.0 International
      •4.2k•0•0•5•Updated Jul 6, 2024Jul 6, 2024

    • CBOM

      Public
      Cryptography Bill of Materials
      Apache License 2.0
      •7•1•0•0•Updated Oct 19, 2023Oct 19, 2023

    • corsair_scan

      Public
      Corsair_scan is a security tool to test Cross-Origin Resource Sharing (CORS).
      securitysdlcpythonmisconfigurationscors-configurationsdomain-injection
      Python
      •
      MIT License
      •15•122•3•6•Updated Apr 14, 2023Apr 14, 2023

    • community-scripts

      Public
      A collection of ZAP scripts provided by the community - pull requests very welcome!
      JavaScript
      •246•2•0•0•Updated Oct 21, 2021Oct 21, 2021

    • clair-scan-action

      Public
      Clair Scan GitHub Action repository
      Shell
      •
      MIT License
      •3•1•0•0•Updated Sep 2, 2021Sep 2, 2021

    • DependencyCheck_Builder

      Public
      It builds a dependency check image with the updated database every night
      Dockerfile
      •
      MIT License
      •15•1•0•1•Updated May 30, 2021May 30, 2021

    • DependencyCheck_Action

      Public
      Github action to run dependency check
      MIT License
      •38•5•0•0•Updated May 5, 2021May 5, 2021

    • CurrentSense-TinyML

      Public
      Spying on Microcontrollers using Current Sensing and embedded TinyML models
      machine-learningembedded-systemssensorstensorflowlitetinyml
      C++
      •
      MIT License
      •8•84•0•0•Updated Mar 23, 2021Mar 23, 2021

    • QuantumRNG

      Public archive
      A Quantum computer based CSPRNG, written in python, as a PoC for using QCs in services.
      quantum-computingcsprnghacktoberfesthacktoberfest2020
      Python
      •
      MIT License
      •1•9•0•0•Updated Dec 18, 2020Dec 18, 2020

    • DependencyCheck_Test

      Public
      Dependency check action test
      MIT License
      •3•0•0•0•Updated Dec 7, 2020Dec 7, 2020

    • semgrep

      Public
      Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
      Python
      •
      GNU Lesser General Public License v2.1
      •739•1•0•0•Updated Aug 5, 2020Aug 5, 2020