Skip to content

@Corgea Corgea

Change the repository type filter

All

    Repositories list

    34 repositories

    • cli

      Public
      The Corgea CLI. Scan for vulnerabilties, create fixes.
      Rust
      •
      GNU Lesser General Public License v2.1
      •1•5•1•11•Updated Jul 29, 2026Jul 29, 2026

    • skills

      Public
      Agent skills for Corgea tools — install with: npx skills add corgea/skills
      open-sourceskillscybersecurity
      open-sourceskillscybersecurityagentssecuriy-toolsagent-skills
      MIT License
      •0•1•0•0•Updated Jul 29, 2026Jul 29, 2026

    • Sighthound

      Public
      Corgea's rule-based SAST scanner
      javascriptrubypython
      javascriptrubypythonjavagorustgolangphpsecuritytree-sitter
      Rust
      •
      MIT License
      •19•269•3•11•Updated Jul 28, 2026Jul 28, 2026

    • homebrew-cli

      Public
      Ruby
      •0•0•0•8•Updated Jul 28, 2026Jul 28, 2026

    • insecure-kubernetes-deployments

      Public
      A full insecure kubernetes application for testing security tools
      Python
      •346•0•0•17•Updated May 19, 2026May 19, 2026

    • remediation-VAmPI

      Public
      Vulnerable REST API with OWASP top 10 vulnerabilities for security testing
      Python
      •
      MIT License
      •578•0•0•2•Updated Mar 14, 2026Mar 14, 2026

    • openssl

      Public
      TLS/SSL and crypto library
      C
      •
      Apache License 2.0
      •11k•0•0•0•Updated Mar 5, 2026Mar 5, 2026

    • posthog-js

      Public
      Send usage data from your web app or site to PostHog, with autocapture.
      TypeScript
      •
      Other
      •311•0•0•7•Updated Feb 26, 2026Feb 26, 2026

    • juice-shop

      Public
      OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
      TypeScript
      •
      MIT License
      •19k•1•0•63•Updated Feb 11, 2026Feb 11, 2026

    • posthog

      Public
      🦔 PostHog provides open-source web & product analytics, session recording, feature flagging and A/B testing that you can self-host. Get started - free.
      Python
      •
      Other
      •3.1k•0•0•17•Updated Feb 6, 2026Feb 6, 2026

    • saleor

      Public
      Saleor Core: the high performance, composable, headless commerce API.
      Python
      •
      BSD 3-Clause "New" or "Revised" License
      •6.1k•0•0•15•Updated Feb 3, 2026Feb 3, 2026

    • streamlit

      Public
      Streamlit — A faster way to build and share data apps.
      Python
      •
      Apache License 2.0
      •4.3k•0•0•1•Updated Jan 6, 2026Jan 6, 2026

    • hugo-main

      Public
      Go
      •
      Apache License 2.0
      •1•0•0•6•Updated Nov 20, 2025Nov 20, 2025

    • vulnado

      Public
      Purposely vulnerable Java application to help lead secure coding workshops
      Java
      •
      Other
      •832•0•0•15•Updated Oct 30, 2025Oct 30, 2025

    • mini-juice-shop

      Public
      mini-juice-shop
      test-automationvulnerable-web-appcorgea-scheduled-scan
      test-automationvulnerable-web-appcorgea-scheduled-scan
      JavaScript
      •1•0•0•8•Updated Sep 11, 2025Sep 11, 2025

    • www-community

      Public
      OWASP Community Pages are a place where OWASP can accept community contributions for security-related content.
      HTML
      •841•0•0•0•Updated Aug 1, 2025Aug 1, 2025

    • vulpy

      Public
      Vulnerable Python Application To Learn Secure Development
      Python
      •
      MIT License
      •526•0•0•20•Updated Jul 15, 2025Jul 15, 2025

    • Chat2DB

      Public
      🔥🔥🔥AI-driven database tool and SQL client, The hottest GUI client, supporting MySQL, Oracle, PostgreSQL, DB2, SQL Server, DB2, SQLite, H2, ClickHouse, and more.
      Java
      •
      Apache License 2.0
      •3k•0•0•2•Updated Feb 24, 2025Feb 24, 2025

    • PokemonBattleJournal

      Public
      C#
      •
      The Unlicense
      •1•0•0•0•Updated Feb 21, 2025Feb 21, 2025

    • python-certifi

      Public
      (Python Distribution) A carefully curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of…
      Python
      •
      Other
      •296•0•0•0•Updated Feb 4, 2025Feb 4, 2025

    • actions

      Public
      Corgea offers a suite of GitHub Actions designed to enhance the security and quality of your code. Our actions automate security scanning and quality checks, en…
      0•0•0•0•Updated Jan 10, 2025Jan 10, 2025

    • juice-shop-2

      Public
      TypeScript
      •
      MIT License
      •1•1•0•4•Updated Sep 18, 2024Sep 18, 2024

    • remediation-nodejs-goof

      Public
      Super vulnerable todo list application
      JavaScript
      •
      Apache License 2.0
      •3.5k•0•0•5•Updated Jun 13, 2024Jun 13, 2024

    • remediation-brokencrystals

      Public
      A Broken Application - Very Vulnerable!
      CSS
      •
      MIT License
      •339•0•0•10•Updated Apr 4, 2024Apr 4, 2024

    • DVIA-v2

      Public
      Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professional…
      Swift
      •
      MIT License
      •241•0•0•0•Updated Mar 29, 2024Mar 29, 2024

    • remediation-DVSA

      Public
      a Damn Vulnerable Serverless Application
      JavaScript
      •
      GNU General Public License v3.0
      •208•0•0•10•Updated Mar 27, 2024Mar 27, 2024

    • remediation-vuln_node_express

      Public
      JavaScript
      •377•0•0•2•Updated Mar 26, 2024Mar 26, 2024

    • remediation-cloudgoat

      Public
      CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
      Python
      •
      BSD 3-Clause "New" or "Revised" License
      •764•0•0•3•Updated Mar 13, 2024Mar 13, 2024

    • action

      Public
      0•1•0•0•Updated Feb 27, 2024Feb 27, 2024

    • remediation-Tiredful-API

      Public
      An intentionally designed broken web application based on REST API.
      Python
      •
      GNU General Public License v3.0
      •145•0•0•1•Updated Feb 7, 2024Feb 7, 2024
    ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.