vulnerable-apps
dagda
Our great sponsors
vulnerable-apps | dagda | |
---|---|---|
1 | 4 | |
214 | 1,109 | |
1.9% | - | |
10.0 | 0.0 | |
about 2 years ago | 11 months ago | |
Python | Python | |
Apache License 2.0 | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
vulnerable-apps
dagda
-
General Docker Troubleshooting, Best Practices & Where to Go From Here
Dagda. A tool to perform static analysis of known vulnerabilities, trojans, viruses, malware & other malicious threats in Docker images/containers.
-
Open source container scanning tool to find vulnerabilities and suggest best practice improvements?
https://github.com/eliasgranderubio/dagda 1k stars, updated July 27th, 2021
-
2 Widespread Attacks on Your Containerized Environment and 7 Rules to Prevent it.
Dagda uses a static analysis approach to find viruses, malware, and fake sub-images and trojans. It is based on Red Hat Security Advisories (RHSA) libraries of existing vulnerabilities databases.
-
Am I being crypto-jacked by hackers
Furthermore, there are tools such as https://github.com/eliasgranderubio/dagda.
What are some alternatives?
fakernet - A framework for quickly creating internet-like services for labs, exercises, and research.
clair - Vulnerability Static Analysis for Containers
dvna - Damn Vulnerable NodeJS Application
Harbor - An open source trusted cloud native registry project that stores, signs, and scans content.
netlab - Making virtual networking labs suck less
anchore-engine - A service that analyzes docker images and scans for vulnerabilities
trivy - Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
opencve - CVE Alerting Platform
vimp - Compare data from multiple vulnerability scanners to get a more complete picture of potential exposures.
pandora - Pandora is an analysis framework to discover if a file is suspicious and conveniently show the results
ingredient-phrase-tagger - Fork of the NY Times tagger with improved testing, bugfixes
grafeas - Artifact Metadata API