ghuff07's Stars
mostafahussein/awesome-security-checklist
If you're launching a new application and have security in mind, this is a good starting point
tanprathan/MobileApp-Pentest-Cheatsheet
The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
mjhea0/angular-testing-tutorial
welcome!
eliotsykes/rails-security-checklist
:key: Community-driven Rails Security Checklist (see our GitHub Issues for the newest checks that aren't yet in the README)
GoogleCloudPlatform/continuous-deployment-on-kubernetes
Get up and running with Jenkins on Google Kubernetes Engine
minimaxir/big-list-of-naughty-strings
The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.
home-assistant/core
:house_with_garden: Open source home automation that puts local control and privacy first.
Theo47/Depressurizer
Depressurizer is a program that helps you categorize your steam games.
iriusrisk/Community
IriusRisk Community
seccubus/seccubus
Easy automated vulnerability scanning, reporting and analysis
openstack-archive/openstack-ansible-security
Security Role for OpenStack-Ansible
CISOfy/lynis
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
docker/docker-bench-security
The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.
chef-boneyard/audit
Audit Cookbook for Chef Compliance
OWASP/OWASP-VWAD
The OWASP Vulnerable Web Applications Directory project (VWAD) is a comprehensive and well maintained registry of all known vulnerable web applications currently available.
DefectDojo/django-DefectDojo
DevSecOps, ASPM, Vulnerability Management. All on one platform.
aparsons/bag-of-holding
An application to assist in the organization and prioritization of software security activities.
facebookarchive/fbctf
Platform to host Capture the Flag competitions
OWASP/owasp-masvs
The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.
OWASP/owasp-mastg
The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).
denimgroup/threadfix
ThreadFix is a software vulnerability management platform. This GitHub site is far out of date. Please go to www.threadfix.it for up-to-date information.
KvasirSecurity/Kvasir
Kvasir: Penetration Test Data Management
Netflix-Skunkworks/Scumblr
Web framework that allows performing periodic syncs of data sources and performing analysis on the identified results
open-guides/og-aws
📙 Amazon Web Services — a practical guide
OWASP/OWASP-Testing-Guide
OWASP Testing Guide
OWASP/glue
Application Security Automation
OWASP/ASVS
Application Security Verification Standard
OWASP/Maturity-Models
Node application to help managing Maturity Models like the ones created by BSIMM and OpenSAMM
OWASP/SAMM-TOOL
OWASP/DevGuide
The OWASP Guide