Merge pull request #126 from hahwul/add-dependency-confusion-tools

feat: Add ConfusedDotnet, dependency-confusion-scanner, and depenfusion tools
hahwul · Aug 18, 2024 · 4d79a9d · 4d79a9d
2 parents 75b7976 + a987cb0
commit 4d79a9d
Show file tree

Hide file tree

Showing 3 changed files with 27 additions and 0 deletions.
diff --git a/weapons/ConfusedDotnet.yaml b/weapons/ConfusedDotnet.yaml
@@ -0,0 +1,9 @@
+---
+name: ConfusedDotnet
+description: Tool to check for dependency confusion vulnerabilities in NuGet package management systems
+url: https://github.com/visma-prodsec/ConfusedDotnet
+category: tool
+type: Scanner
+platform: [windows]
+lang: C#
+tags: [dependency-confusion]
diff --git a/weapons/dependency-confusion-scanner.yaml b/weapons/dependency-confusion-scanner.yaml
@@ -0,0 +1,9 @@
+---
+name: dependency-confusion-scanner
+description: This small repo is meant to scan Github's repositories for potential Dependency confusion vulnerabilities.
+url: https://github.com/Yaniv-git/dependency-confusion-scanner
+category: tool
+type: Scanner
+platform: [linux, macos, windows]
+lang: Python
+tags: [dependency-confusion]
diff --git a/weapons/depenfusion.yaml b/weapons/depenfusion.yaml
@@ -0,0 +1,9 @@
+---
+name: depenfusion
+description: A powerful pentesting tool for detecting and exploiting dependency confusion vulnerabilities in Node.js projects
+url: https://github.com/benjamin-mauss/depenfusion
+category: tool
+type: Scanner
+platform: [linux, macos, windows]
+lang: Python
+tags: [dependency-confusion]