railsgoat
dawnscanner
| railsgoat | dawnscanner | |
|---|---|---|
| 2 | 2 | |
| 853 | 729 | |
| 0.2% | - | |
| 0.0 | 4.6 | |
| 3 months ago | 2 months ago | |
| HTML | Ruby | |
| MIT License | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
railsgoat
-
How to Safely Deserialize Data in Ruby on Rails
In this example, we’ll analyze the runtime behavior of the OWASP Railsgoat project, which is a vulnerable Ruby on Rails application. This project demonstrates the OWASP Top-10 and is a great project for educating developers and security teams.
-
Security Risks On Rails: Misconfiguration and Unsafe Integrations
As with the other articles, RailsGoat will be used to explore some aspects of these threats in practice. If you're new here, please refer to the previous two articles to get the app set up and get acquainted with what we’ve explored so far. Let's jump right in!
dawnscanner
-
Security Risks On Rails: Misconfiguration and Unsafe Integrations
Other useful gems you may take a look at are dawnscanner, reek, and hakiri_toolbelt.
-
Rails application boilerplate for fast MVP development
test and add dawnscanner
What are some alternatives?
Brakeman - A static analysis security vulnerability scanner for Ruby on Rails applications
rails-viewcomponent-rspec-tailwind - Confidently develop Rails app views with reusable components.
Portus - Authorization service and frontend for Docker registry (v2)
kickoff_tailwind - A rapid Rails 7 application template for personal use bundled with Tailwind CSS
Pronto - Quick automated code review of your changes
administration-zero - An administration system generator for Rails applications.
bundler-audit - Patch-level verification for Bundler
protected_attributes - Protect attributes from mass-assignment in ActiveRecord models.
Devise - Flexible authentication solution for Rails with Warden.
FriendlyId - FriendlyId is the “Swiss Army bulldozer” of slugging and permalink plugins for ActiveRecord. It allows you to create pretty URL’s and work with human-friendly strings as if they were numeric ids for ActiveRecord models.