bondijois's Stars
tauri-apps/tauri
Build smaller, faster, and more secure desktop applications with a web frontend.
danielmiessler/SecLists
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
OpenBB-finance/OpenBBTerminal
Investment Research for Everyone, Everywhere.
fingerprintjs/fingerprintjs
Browser fingerprinting library. Accuracy of this version is 40-60%, accuracy of the commercial Fingerprint Identification is 99.5%. V4 of this library is BSL licensed.
qeeqbox/social-analyzer
API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites
nuclio/nuclio
High-Performance Serverless event and data processing platform
jamiehannaford/what-happens-when-k8s
🤔 What happens when I type kubectl run?
RhinoSecurityLabs/pacu
The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
osohq/oso
Oso is a batteries-included framework for building authorization in your application.
open-policy-agent/conftest
Write tests against structured configuration data using the Open Policy Agent Rego query language
microsoft/restler-fuzzer
RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.
Checkmarx/kics
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
DataDog/stratus-red-team
:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud
OTRF/Security-Datasets
Re-play Security Events
atc-project/atomic-threat-coverage
Actionable analytics designed to combat threats
jonrau1/ElectricEye
ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring supporting 100s of services and evaluations to harden your CSP & SaaS environments with controls mapped to over 20 industry, regulatory, and best practice controls frameworks
curiefense/curiefense
Curiefense is a unified, open source platform protecting cloud native applications.
SummitRoute/csp_security_mistakes
This repo has been replaced by https://www.cloudvulndb.org
aquasecurity/cloud-security-remediation-guides
Security Remediation Guides
BishopFox/badPods
A collection of manifests that will create pods with elevated privileges.
plexsystems/konstraint
A policy management tool for interacting with Gatekeeper
wiz-sec/open-cvdb
An open project to list all publicly known cloud vulnerabilities and CSP security issues
XMCyber/XMGoat
twistlock/whoc
A container image that exfiltrates the underlying container runtime to a remote server
sharathkramadas/k8s-nuclei-templates
Nuclei templates for K8S security scanning
canonical/sec-cvescan
Analyzes an Ubuntu system and checks for unpatched vulnerabilities.
aquasecurity/cfsec
Static analysis for CloudFormation templates to identify common misconfiguration
aws-solutions/automated-forensic-orchestrator-for-amazon-ec2
Automated Forensics Orchestrator for Amazon EC2 is a self-service AWS Solution implementation that enterprise customers can deploy to quickly set up and configure an automated orchestration workflow that enables their Security Operations Centre (SOC) to capture and examine data from EC2 instances and attached volumes as evidence for forensic analysis, in the event of a potential security breach. It will orchestrate the forensics process from the point at which a threat is first detected, enable isolation of the affected EC2 instances and data volumes, capture memory and disk images to secure storage, and trigger automated actions or tools for investigation and analysis of such artefacts. All the while, the solution will notify and report on its progress, status, and findings. It will enable SOC to continuously discover and analyze patterns of fraudulent activities across multi-account and multi-region environments. The solution will leverage native AWS services and be underpinned by a highly available, resilient, and serverless architecture, security, and operational monitoring features. Digital forensics is a 4 step process of triaging, acquisition, analysis and reporting. Automated Forensics framework provides capability to enterprise to act on security event by imaging or acquisition of breached resource for examination and generate forensic report about the security breach. In the event of a security breach, it will enable customers to easily to capture and examine required targeted data for forsensic’s storage and analysis. This solution framework enables security operations centre to discover and analyse patterns of fraudulent activities. The automated forensics solution will provide a multi-account and a multi-region [“solution”] built using native AWS services.
snaplabsio/BastionBox
A simple bastion host setup designed for cloud-hosted lab environments.
raesene/sycamore
Sycamore - An app. for managing Deciduous Attack Trees