benno001's Stars
open-guides/og-aws
📙 Amazon Web Services — a practical guide
OWASP/CheatSheetSeries
The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
owasp-amass/amass
In-depth attack surface mapping and asset discovery
99designs/aws-vault
A vault for securely storing and accessing AWS credentials in development environments
mandiant/commando-vm
Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com
nccgroup/ScoutSuite
Multi-Cloud Security Auditing Tool
aws-samples/aws-cdk-examples
Example projects using the AWS CDK
microsoft/ApplicationInspector
A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.
dweinstein/awesome-frida
Awesome Frida - A curated list of Frida resources http://www.frida.re/ (https://github.com/frida/frida)
mozilla/MozDef
DEPRECATED - MozDef: Mozilla Enterprise Defense Platform
StephenGrider/GoCasts
Companion Repo to https://www.udemy.com/go-the-complete-developers-guide/
PowerShell/PSScriptAnalyzer
Download ScriptAnalyzer from PowerShellGallery
nccgroup/PMapper
A tool for quickly evaluating IAM permissions in AWS.
hvac/hvac
:lock: Python 3.X client for HashiCorp Vault
OWASP/wrongsecrets
Vulnerable app with examples showing how to not use secrets
dagrz/aws_pwn
A collection of AWS penetration testing junk
andresriancho/enumerate-iam
Enumerate the permissions associated with AWS credential set
RhinoSecurityLabs/Security-Research
Exploits written by the Rhino Security Labs team
duo-labs/parliament
AWS IAM linting library
awslabs/aws-deployment-framework
The AWS Deployment Framework (ADF) is an extensive and flexible framework to manage and deploy resources across multiple AWS accounts and regions based on AWS Organizations.
awslabs/aws-security-automation
Collection of scripts and resources for DevSecOps and Automated Incident Response Security
amazon-archives/aws-full-stack-template
AWS Full-Stack Template is a full-stack sample web application that creates a simple CRUD (create, read, update, delete) app, and provides the foundational services, components, and plumbing needed to get a basic web application up and running.
aws-samples/aws-security-workshops
A collection of the latest AWS Security workshops
z0ph/aws-security-toolbox
AWS Security Tools (AST) in a simple Docker container. :package:
absoluteappsec/handouts
materials we hand out
ksoclabs/kube-goat
A deliberately vulnerable Kubernetes cluster
andynog/firecracker-microvm-samples
This repository contains examples of micro virtual machines (microVMs) that can be run using firecracker.
binxio/aws-account-destroyer
AWS CodeBuild project that will destroy your entire account every day at 23:00
davevs/pySCS
Security Control Selector
commjoen/goscore
Simple vulnerable webserver in Go