amontzx

amontzx's Stars

• aquasecurity/tfsec

  Tfsec is now part of Trivy

  Language:Go6.7k543

• tenable/terrascan

  Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

  Language:Go4.8k509

• Skyscanner/cfripper

  Library and CLI tool for analysing CloudFormation templates and check them for security compliance.

  Language:Python39956

• OWASP-Benchmark/BenchmarkJava

  OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually exploitable, it’s a fair test for any kind of vulnerability detection tool. For more details on this project, please see the OWASP Benchmark Project home page.

  Language:Java6781.1k

• analysis-tools-dev/static-analysis

  ⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.

  Language:Rust13.5k1.4k

• DefectDojo/django-DefectDojo

  DevSecOps, ASPM, Vulnerability Management. All on one platform.

  Language:HTML3.8k1.6k

• deshpandetanmay/git-secrets

  Prevents you from committing secrets and credentials into git repositories

  Language:Shell1720

• sonatype-nexus-community/DevAudit

  Open-source, cross-platform, multi-purpose security auditing tool

  Language:C#36074

• mozilla/infosec.mozilla.org

  Guidelines, principles published on https://infosec.mozilla.org

  Language:JavaScript9765

• mozilla/wikimo_content

  WikiMo documentation (mainly the security space, but everyone's welcome to use this)

  Language:Python6526

• pumasecurity/puma-scan

  Puma Scan is a software security Visual Studio extension that provides real time, continuous source code analysis as development teams write code. Vulnerabilities are immediately displayed in the development environment as spell check and compiler warnings, preventing security bugs from entering your applications.

  Language:C#44980

• OWASP/user-security-stories

  Repo to hold mapping of user-security-stories

  11431

• broamski/aws-mfa

  Manage AWS MFA Security Credentials

  Language:Python1k169

• awslabs/git-secrets

  Prevents you from committing secrets and credentials into git repositories

  Language:Shell12.5k1.2k

• Netflix/repokid

  AWS Least Privilege for Distributed, High-Velocity Deployment

  Language:Python1.1k104

• rsrdesarrollo/generator-burp-extension

  Everything you need about Burp Extension Generation

  Language:Java15227

• github/secure_headers

  Manages application of security headers with many safe defaults

  Language:Ruby3.2k253

• gquere/pwn_jenkins

  Notes about attacking Jenkins servers

  Language:Python2k333

• francesc-h/firebase

  Exploiting misconfigured firebase databases

  Language:Python12433

• frostbits-security/SIET

  Smart Install Exploitation Tool

  Language:Python574145

• infobyte/faraday

  Open Source Vulnerability Management Platform

  Language:Python5.1k925

• gitleaks/gitleaks

  Find secrets with Gitleaks 🔑

  Language:Go18.3k1.5k

• meirwah/awesome-incident-response

  A curated list of tools for incident response

  7.8k1.5k

• sbilly/awesome-security

  A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.

  12.6k1.9k

• x0rz/phishing_catcher

  Phishing catcher using Certstream

  Language:Python1.7k356

• ustayready/CredSniper

  CredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens.

  Language:HTML1.3k296

• praveendhac/CISBenchmarks

  Hardening audit scripts validating Workstations and Servers based on CIS benchmarks

  Language:Python157

• bones-integgroll/CookieSheet

  Language:Python3

• mubix/whitechapel-ng

  Next Generation of White Chapel

  Language:Ruby217

• ssllabs/research

  2.2k225