Skip to content

@Corgea Corgea

All

    Repositories list

    34 repositories

    • cli

      Public
      The Corgea CLI. Scan for vulnerabilties, create fixes.
      Rust
      •
      GNU Lesser General Public License v2.1
      •1•5•1•8•Updated Sep 29, 2026Sep 29, 2026

    • homebrew-cli

      Public
      Ruby
      •0•0•0•18•Updated Sep 23, 2026Sep 23, 2026

    • Sighthound

      Public
      Corgea's rule-based SAST scanner
      javascriptrubypython
      javascriptrubypythonjavagorustgolangphpsecuritytree-sitter
      Rust
      •
      MIT License
      •20•285•1•13•Updated Sep 17, 2026Sep 17, 2026

    • skills

      Public
      Agent skills for Corgea tools — install with: npx skills add corgea/skills
      open-sourceskillscybersecurity
      open-sourceskillscybersecurityagentssecuriy-toolsagent-skills
      JavaScript
      •
      MIT License
      •0•1•0•2•Updated Sep 3, 2026Sep 3, 2026

    • insecure-kubernetes-deployments

      Public
      A full insecure kubernetes application for testing security tools
      Python
      •379•0•0•17•Updated Sep 2, 2026Sep 2, 2026

    • remediation-VAmPI

      Public
      Vulnerable REST API with OWASP top 10 vulnerabilities for security testing
      Python
      •
      MIT License
      •606•0•0•2•Updated Mar 14, 2026Mar 14, 2026

    • openssl

      Public
      TLS/SSL and crypto library
      C
      •
      Apache License 2.0
      •12k•0•0•0•Updated Mar 5, 2026Mar 5, 2026

    • posthog-js

      Public
      Send usage data from your web app or site to PostHog, with autocapture.
      TypeScript
      •
      Other
      •349•0•0•7•Updated Feb 26, 2026Feb 26, 2026

    • juice-shop

      Public
      OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
      TypeScript
      •
      MIT License
      •20k•1•0•63•Updated Feb 11, 2026Feb 11, 2026

    • posthog

      Public
      🦔 PostHog provides open-source web & product analytics, session recording, feature flagging and A/B testing that you can self-host. Get started - free.
      Python
      •
      Other
      •3.4k•0•0•17•Updated Feb 6, 2026Feb 6, 2026

    • saleor

      Public
      Saleor Core: the high performance, composable, headless commerce API.
      Python
      •
      BSD 3-Clause "New" or "Revised" License
      •6.1k•0•0•15•Updated Feb 3, 2026Feb 3, 2026

    • streamlit

      Public
      Streamlit — A faster way to build and share data apps.
      Python
      •
      Apache License 2.0
      •4.4k•0•0•1•Updated Jan 6, 2026Jan 6, 2026

    • hugo-main

      Public
      Go
      •
      Apache License 2.0
      •1•0•0•6•Updated Nov 20, 2025Nov 20, 2025

    • vulnado

      Public
      Purposely vulnerable Java application to help lead secure coding workshops
      Java
      •
      Other
      •847•0•0•15•Updated Oct 30, 2025Oct 30, 2025

    • mini-juice-shop

      Public
      mini-juice-shop
      test-automationvulnerable-web-appcorgea-scheduled-scan
      test-automationvulnerable-web-appcorgea-scheduled-scan
      JavaScript
      •1•0•0•8•Updated Sep 11, 2025Sep 11, 2025

    • www-community

      Public
      OWASP Community Pages are a place where OWASP can accept community contributions for security-related content.
      HTML
      •849•0•0•0•Updated Aug 1, 2025Aug 1, 2025

    • vulpy

      Public
      Vulnerable Python Application To Learn Secure Development
      Python
      •
      MIT License
      •530•0•0•20•Updated Jul 15, 2025Jul 15, 2025

    • Chat2DB

      Public
      🔥🔥🔥AI-driven database tool and SQL client, The hottest GUI client, supporting MySQL, Oracle, PostgreSQL, DB2, SQL Server, DB2, SQLite, H2, ClickHouse, and more.
      Java
      •
      Apache License 2.0
      •3k•0•0•2•Updated Feb 24, 2025Feb 24, 2025

    • PokemonBattleJournal

      Public
      C#
      •
      The Unlicense
      •1•0•0•0•Updated Feb 21, 2025Feb 21, 2025

    • python-certifi

      Public
      (Python Distribution) A carefully curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of…
      Python
      •
      Other
      •297•0•0•0•Updated Feb 4, 2025Feb 4, 2025

    • actions

      Public
      Corgea offers a suite of GitHub Actions designed to enhance the security and quality of your code. Our actions automate security scanning and quality checks, en…
      0•0•0•0•Updated Jan 10, 2025Jan 10, 2025

    • juice-shop-2

      Public
      TypeScript
      •
      MIT License
      •1•1•0•4•Updated Sep 18, 2024Sep 18, 2024

    • remediation-nodejs-goof

      Public
      Super vulnerable todo list application
      JavaScript
      •
      Apache License 2.0
      •3.6k•0•0•5•Updated Jun 13, 2024Jun 13, 2024

    • remediation-brokencrystals

      Public
      A Broken Application - Very Vulnerable!
      CSS
      •
      MIT License
      •344•0•0•10•Updated Apr 4, 2024Apr 4, 2024

    • DVIA-v2

      Public
      Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professional…
      Swift
      •
      MIT License
      •243•0•0•0•Updated Mar 29, 2024Mar 29, 2024

    • remediation-DVSA

      Public
      a Damn Vulnerable Serverless Application
      JavaScript
      •
      GNU General Public License v3.0
      •208•0•0•10•Updated Mar 27, 2024Mar 27, 2024

    • remediation-vuln_node_express

      Public
      JavaScript
      •380•0•0•2•Updated Mar 26, 2024Mar 26, 2024

    • remediation-cloudgoat

      Public
      CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
      Python
      •
      BSD 3-Clause "New" or "Revised" License
      •773•0•0•3•Updated Mar 13, 2024Mar 13, 2024

    • action

      Public
      0•1•0•0•Updated Feb 27, 2024Feb 27, 2024

    • remediation-Tiredful-API

      Public
      An intentionally designed broken web application based on REST API.
      Python
      •
      GNU General Public License v3.0
      •147•0•0•1•Updated Feb 7, 2024Feb 7, 2024
    ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.