Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

awesome-golang-security

https://github.com/mightysai1997/awesome-golang-security

Last synced: 3 days ago
JSON representation

Articles, Guides & Talks
- Go - Secure Coding Practices - [PDF] Talk given by Sulhaedir at the OWASP Jakarta meetup.
- OWASP Go - Secure Coding Practices - Go programming language secure coding practices guide.
- golang-tls - Simple Golang HTTPS/TLS Examples.
- Hacking with Go - Hacking with Go for security professionals.
- gosea - Go Secure Example Application (GOSEA).
- A Go Programmer's Guide to Secure Connections - [Video] GopherCon 2018, Liz Rice.
- Attacking Go
- ReDoS in Go - Diving Deep into Regular Expression Denial of Service (ReDoS) in Go.
Reporting Bugs
- ![CC0
Web Framework Hardening
- nosurf - CSRF protection middleware for Go.
- gorilla/csrf - Provides Cross-Site Request Forgery (CSRF) prevention middleware for Go web applications & services.
- gorilla/securecookie - Encodes and decodes authenticated and optionally encrypted cookie values for Go web applications.
- secure - Secure is an HTTP middleware for Go that facilitates most of your security needs for web applications.
- unindexed - A drop-in replacement for `http.Dir` which disables directory indexing.
- beego-security-headers - beego framework filter for easy security headers management.
Libraries
- paseto - Platform-Agnostic Security Tokens implementation in GO (Golang).
- hsts - Go HTTP Strict Transport Security library.
- jwt-go - Golang implementation of JSON Web Tokens (JWT).
- httprobe - Take a list of domains and probe for working HTTP and HTTPS servers.
Static Code Analysis
- gosec - Inspects source code for security problems by scanning the Go AST and matching it with a set of rules. Comes bundled in a Docker container [securego/gosec](https://hub.docker.com/r/securego/gosec).
- gometalinter - Concurrently runs most of the existing go linters and normalizes their output.
- ChainJacking - Find which of your Go lang direct GitHub dependencies is susceptible to ChainJacking attack.
- safesql - Static analysis tool for Golang that protects against SQL injections. It does not seem to be actively maintained at the moment.
Private Key Infrastructure
- CloudFlare SSL - CFSSL is CloudFlare's PKI/TLS swiss army knife. It is both a command line tool and an HTTP API server for signing, verifying, and bundling TLS certificates.
Hacking Playground
- govwa - A vulnerable golang application including the most common vulnerabilities found in web applications today.
- Lambhack - A very vulnerable serverless application in AWS Lambda.
Vulnerabilities and Security Advisories
- GoCenter Security - vscode-extension) - Free vulnerability data around Go Modules
- Common Vulnerabilities and Exposures - Vulnerabilities that were assigned a CVE. Covers the language and packages.

Programming Languages

Go 17 Python 1

Categories

Articles, Guides & Talks 8 Web Framework Hardening 6 Static Code Analysis 4 Libraries 4 Vulnerabilities and Security Advisories 2 Hacking Playground 2 Reporting Bugs 1 Private Key Infrastructure 1

Sub Categories

Keywords

go 9 golang 9 security 8 middleware 3 csrf 2 gorilla 2 gorilla-web-toolkit 2 security-tools 2 paseto 1 microservice 1 jwt 1 encoder 1 decoder 1 authentication 1 auth 1 http 1 sessions 1 securecookie 1 cookies 1 cookie 1 xsrf 1 csrf-tokens 1 csrf-protection 1 tools 1 security-scanner 1 security-hardening 1 security-audit 1 secure 1 openssl 1 libressl 1 https-server 1 https 1 httpclient 1 http2 1 awesome 1 appsec 1 supply-chain 1 linter 1 gometalinter 1 static-code-analysis 1 static-analysis 1 security-automation 1 token 1 soa 1 past 1