owasp-noir/noir

Consolidate the duplicated Haskell `strip_haskell_comments` into a shared `Analyzer::Haskell::Helper` 12 days ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Consolidate the duplicated camelCase-to-underscore `underscore` helper used by the Perl analyzers 12 days ago

🔬 analyzer good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Consolidate the duplicated Java `join_paths(prefix, suffix)` path-joiner into a shared `Analyzer::Java::Helper` 16 days ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Remove four unused private methods in the JS route miniparser (js_parser.cr) about 1 month ago

🥢 mini-lexer good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Document the remaining 10 GitHub Action inputs (ai_*, probe, export_*, diff_path, no_log) in the Action docs page about 1 month ago

📑 documentation good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Extract the hardcoded AI-context label-length cap (64) to a named constant in pattern_matcher.cr about 1 month ago

good first issue 🧩 ai-context

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Extract the agent grep-snippet truncation length (220) to a named constant in unified_ai.cr about 1 month ago

🤖 ai-analyzer good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Add a direct spec for the `AIContext` bucket dedup + per-section cap about 1 month ago

💊 spec good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Add a spec for the global `join_path` path-join helper in `src/utils/utils.cr` about 1 month ago

💊 spec good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Document the `noir cache purge <days>` action on the CLI Commands page about 1 month ago

📑 documentation good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

`ENV.keys.includes?` -> `ENV.has_key?` in the ZAP deliver model about 1 month ago

💌 deliver good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Remove three unused private methods across php/symfony and ruby/rails analyzers about 1 month ago

🔬 analyzer good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Remove the unused per-method route scanner cluster in the restify JS analyzer about 1 month ago

🔬 analyzer good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Remove the dead legacy route-line scanner in the fasthttp Go analyzer (post tree-sitter migration) about 1 month ago

🔬 analyzer good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Consolidate the byte-identical Python slash-collapse `normalize_path` + `join_paths` helpers (sanic / bottle / aiohttp) into a shared module about 1 month ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Consolidate the duplicated Perl `sanitize_perl_lines` POD/`__END__` stripper into a shared helper about 1 month ago

🔬 analyzer good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Correct the `--techs` description and add `--only-techs` on the "Managing Technology Scopes" page about 1 month ago

📑 documentation good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Use idiomatic `unless x.nil?` instead of `if !x.nil?` across the analyzers about 1 month ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Reuse the existing ALLOWED_HTTP_METHODS constant instead of an inline HTTP-method list in Deliver about 1 month ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Add debug logging to silent rescue blocks in the specification detectors about 1 month ago

🔎 detector good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Add debug logging to silent rescue blocks in the specification analyzers about 1 month ago

🔬 analyzer good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Remove unused leftover constants across the analyzers (APIGW_RESTAPI_TYPE, VERB_TO_METHOD, REGEX_ROUTE_MAPPING, and others) about 1 month ago

🔬 analyzer good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Add a unit spec for the Noir::PathScope path-boundary utility module about 1 month ago

💊 spec good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Add debug logging to bare rescue blocks in unified_ai analyzer about 2 months ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Use idiomatic .empty? instead of .size > 0 in send_proxy about 2 months ago

💡 enhancement 💌 deliver good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Use idiomatic .empty? instead of == "" / != "" for empty-string checks 2 months ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Use idiomatic match check instead of `match(...) != nil` in analyzers 3 months ago

💡 enhancement 🔬 analyzer good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Remove empty `Details#initialize` method in endpoint.cr 4 months ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Miniparsers use `puts` for debug output instead of logger 4 months ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

GraphQL analyzer uses STDERR.puts instead of logger 4 months ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Consolidate duplicate Endpoint initializers using default parameters 4 months ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Remove unnecessary `require "regex"` in graphql_analyzer.cr 4 months ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Add error logging to bare rescue blocks in llm/cache.cr 4 months ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Add error logging to bare rescue blocks in config_initializer.cr 4 months ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Add error logging to bare rescue in send_req.cr 4 months ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Use idiomatic .empty? instead of .size > 0 across the codebase 4 months ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Extract hardcoded error truncation length to a constant in LLM client 5 months ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Extract hardcoded max file size to a named constant in media_filter 5 months ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Mermaid output builder ignores passive_results parameter 5 months ago

💡 enhancement good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Passive scan regex compilation failures are silently ignored 5 months ago

💡 enhancement 🚔 passive-scan good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

File-based analyzer log message doesn't pluralize 'hook' 5 months ago

💡 enhancement 🔬 analyzer good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Typo in test description: 'suffled' → 'shuffled' 5 months ago

💡 enhancement 💊 spec good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Elasticsearch deliver has outer bare rescue that silently swallows errors 5 months ago

🐞 bug 💌 deliver good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

OAS2 analyzer maps 'form' param type to 'json' incorrectly 5 months ago

🐞 bug 🔬 analyzer good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

JSP analyzer contains PHP superglobals in allow_patterns (copy-paste) 5 months ago

🐞 bug 🔬 analyzer good first issue

owasp-noir/noir

1.3K

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

Crystal

#api-security#attack-surfaces#crystal#devsecops#endpoints#hacktoberfest#owasp#owasp-noir#pentesting#security#shadow-api

Open Issues Need Help