adioss's Stars
tldrsec/prompt-injection-defenses
Every practical and proposed defense against prompt injection.
morpheuslord/HackBot
AI-powered cybersecurity chatbot designed to provide helpful and accurate answers to your cybersecurity-related queries and also do code analysis and scan analysis.
bgeesaman/malicious-compliance
Supporting code and demos for KubeCon EU 2023 talk "Malicious Compliance: Reflections on Trusting Container Image Scanners"
prowler-cloud/prowler
Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more
glebarez/padre
Blazing fast, advanced Padding Oracle exploit
mazen160/secrets-patterns-db
Secrets Patterns DB: The largest open-source Database for detecting secrets, API keys, passwords, tokens, and more.
iriusrisk/OpenThreatModel
The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.
IBM/sbom-utility
This repo. is archived. The utility is now at: https://github.com/CycloneDX/sbom-utility
cider-security-research/top-10-cicd-security-risks
projectdiscovery/nuclei-templates
Community curated list of templates for the nuclei engine to find security vulnerabilities.
in-toto/witness
Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.
cybersecsi/houdini
Hundreds of Offensive and Useful Docker Images for Network Intrusion. The name says it all.
kubescape/kubescape
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
welk1n/JNDI-Injection-Exploit
JNDI注入测试工具(A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc)
lit/lit
Lit is a simple library for building fast, lightweight web components.
bridgecrewio/helm-scanner
Open source IaC security scanner for public Helm charts
pravega/pravega
Pravega - Streaming as a new software defined storage primitive
cyberark/kubesploit
Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.
cncf/tag-security
🔐CNCF Security Technical Advisory Group -- secure access, policy control, privacy, auditing, explainability and more!
rlemaitre/rlemaitre.github.io
Personal website and blog
visma-prodsec/confused
Tool to check for dependency confusion vulnerabilities in multiple package management systems
BlazingWind/OWASP-ASVS-4.0-testing-guide
charliegerard/safe-space
Github action that checks the toxicity level of comments and PR reviews to help make repos safe spaces.
BishopFox/smogcloud
Find cloud assets that no one wants exposed 🔎 ☁️
OWASP/www-community
OWASP Community Pages are a place where OWASP can accept community contributions for security-related content.
tern-tools/tern
Tern is a software composition analysis tool and Python library that generates a Software Bill of Materials for container images and Dockerfiles. The SBOM that Tern generates will give you a layer-by-layer view of what's inside your container in a variety of formats including human-readable, JSON, HTML, SPDX and more.
cytopia/pwncat
pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE)
LoupVaillant/Monocypher
An easy to use, easy to deploy crypto library
testcontainers/testcontainers-java
Testcontainers is a Java library that supports JUnit tests, providing lightweight, throwaway instances of common databases, Selenium web browsers, or anything else that can run in a Docker container.
spoofzu/jvmxray
Externalize Java application access to protected resources as log messages.