6mile
Software Supply Chain Offensive Security. Vulnerability research and DevSecOps OG.
@SecureStackCo Australia
Pinned Repositories
6mile
About me!
ami_finder
Find your ami_id's for all regions for your products in the AWS Marketplace
awesome-api-security
A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.
awesome-cicd-attacks
Practical resources for offensive CI/CD security research. Curated the best resources I've seen since 2021.
commit-audit
Shell script that checks if git commits are signed
DarkMass
Automated recon optimized for fast, efficient mass scanning
DevSecOps-Playbook
This is a step-by-step guide to implementing a DevSecOps program for any size organization
git-hunter
Find threats in your source code
ossec_automation
bash scripts and puppet code to install/uninstall OSSEC
Redhat2Cent
Redhat2Cent version 1.1
6mile's Repositories
6mile/DevSecOps-Playbook
This is a step-by-step guide to implementing a DevSecOps program for any size organization
6mile/commit-audit
Shell script that checks if git commits are signed
6mile/DarkMass
Automated recon optimized for fast, efficient mass scanning
6mile/git-hunter
Find threats in your source code
6mile/awesome-cicd-attacks
Practical resources for offensive CI/CD security research. Curated the best resources I've seen since 2021.
6mile/buildkite-agent
The Buildkite Agent is an open-source toolkit written in Go for securely running build jobs on any device or network
6mile/cloud-headers
This is a authoratative listing of all the HTTP headers used by the major cloud providers
6mile/CloudShovel
A tool for scanning public or private AMIs for sensitive files and secrets. The tool follows the research made on AWS CloudQuarry where we scanned 20k+ public AMIs.
6mile/CodeReviewWorkshop
Materials for "The Art of Finding Security Vulnerabilities in Code" workshop
6mile/anon-fork
anonymous forking via a simple bash script
6mile/APAC-Conferences
A community contributed consolidated list of InfoSec meetups in the Asia Pacific region.
6mile/books
📚 I've captured the responses from various discussions of movies, tv shows, books and events that infosec peeps love.
6mile/bsides
6mile/bun
Incredibly fast JavaScript runtime, bundler, test runner, and package manager – all in one
6mile/code-puppets
Code Puppets are sock puppets that malicious actors use to attack the software supply chain
6mile/CVTCAT
Community Validated Tasks for Cybersecurity Assessment & Training
6mile/fake-git-history
Generate Git commits.
6mile/free-training
Free training resources
6mile/github-action-injection-attack
This is a GitHub repository to explain how the GitHub Action injection attack works
6mile/gitlab-version-nse
Nmap script to guess* a GitLab version.
6mile/hijagger
Checks all maintainers of all NPM and Pypi packages for hijackable packages through domain re-registration
6mile/malicious-packages
A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerability (OSV) format.
6mile/obfuscation-detector
Detect different types of JS obfuscation by their AST structure
6mile/OctoC2t
Simple C2 using GitHub repository as comms channel.
6mile/polyfill-service
Automatic polyfill service.
6mile/priscope
A security tool designed to help review merged code changes to open source maintained repositories via LLM assisted review to safeguard against supply chain attacks
6mile/ps-scan-Prestashop-scanner
This tool serves as an initial version scanner specifically designed for PrestaShop, a popular e-commerce platform. The primary purpose of the scanner is to analyze PrestaShop instances for various aspects, such as module information, version details, and potential security vulnerabilities.
6mile/repo-swatting
A new type of attack called "repo swatting" that targets users on GitLab, GitHub and Gitea. This attack is incredibly easy to perform and deletes software repos and gets the targeted user banned.
6mile/tvpo
Target, Value, Patterns and Objectives (TVPO) - A flexible threat modelling framework for the software supply chain
6mile/www-revent-appsec-pacific-northwest-security-conference
OWASP Foundation Web Respository