mertcancoskuner

mertcancoskuner's Stars

• gruntwork-io/terratest

  Terratest is a Go library that makes it easier to write automated tests for your infrastructure code.

  Language:Go7.6k1186361.3k

• cloudquery/cloudquery

  The developer first cloud governance platform

  Language:Go6k662.2k522

• mandiant/capa

  The FLARE team's open-source tool to identify capabilities in executable files.

  Language:Python5.2k821.1k581

• clong/DetectionLab

  Automate the creation of a lab environment complete with security tooling and logging best practices

  Language:HTML4.7k155598993

• cilium/tetragon

  eBPF-based Security Observability and Runtime Enforcement

  Language:C3.8k53559393

• ambionics/phpggc

  PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

  Language:PHP3.4k6762511

• lyft/cartography

  Cartography is a Python tool that consolidates infrastructure assets and the relationships between them in an intuitive graph view powered by a Neo4j database.

  Language:Python3k399386337

• m0bilesecurity/RMS-Runtime-Mobile-Security

  Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime

  Language:JavaScript2.7k6592384

• jthuraisamy/SysWhispers2

  AV/EDR evasion via direct system calls.

  Language:Assembly1.6k4015233

• vxunderground/VX-API

  Collection of various malicious functionality to aid in malware development

  Language:C++1.6k4814260

• evilsocket/legba

  A multiprotocol credentials bruteforcer / password sprayer and enumerator. 🥷

  Language:Rust1.5k145493

• klezVirus/SysWhispers3

  SysWhispers on Steroids - AV/EDR evasion via direct system calls.

  Language:Python1.4k2315177

• am0nsec/HellsGate

  Original C Implementation of the Hell's Gate VX Technique

  Language:C1k197119

• DataDog/KubeHound

  Tool for building Kubernetes attack paths

  Language:Go822153550

• secureCodeBox/secureCodeBox

  secureCodeBox (SCB) - continuous secure delivery out of the box

  Language:JavaScript80725580160

• struppigel/PortEx

  Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness

  Language:Scala503451495

• step-security/github-actions-goat

  GitHub Actions Goat: Deliberately Vulnerable GitHub Actions CI/CD Environment

  Language:JavaScript456967267

• awslabs/snapchange

  Lightweight fuzzing of a memory snapshot using KVM

  Language:Rust44913829

• DataDog/managed-kubernetes-auditing-toolkit

  All-in-one auditing toolkit for identifying common security issues in managed Kubernetes environments. Currently supports Amazon EKS.

  Language:Go33751120

• google/gcp_scanner

  A comprehensive scanner for Google Cloud

  Language:Python31911121101

• padok-team/yatas

  :owl::mag_right: A simple tool to audit your AWS/GCP infrastructure for misconfiguration or potential security issues with plugins integration

  Language:Go31951023

• synacktiv/nord-stream

  Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently supports Azure DevOps, GitHub and GitLab.

  Language:Python2726316

• ermetic-research/cnappgoat

  CNAPPgoat is an open source project designed to modularly provision vulnerable-by-design components in cloud environments.

  Language:Go2638427

• unknownhad/CloudIntel

  This repo contains IOC, malware and malware analysis associated with Public cloud

  24911621

• invictus-ir/Invictus-AWS

  A tool for AWS incident response, that allows for enumeration, acquisition and analysis of data from AWS environments for the purpose of incident response.

  Language:Python1854715

• RoseSecurity/WolfPack

  WolfPack combines the capabilities of Terraform and Packer to streamline the deployment of red team redirectors on a large scale.

  Language:HCL1472015

• oracle/macaron

  Macaron is an extensible supply-chain security analysis framework from Oracle Labs that supports a wide range of build systems and CI/CD services. It can be used to prevent supply chain attacks, detect malicious Python packages, or check conformance to frameworks, such as SLSA. Documentation:

  Language:Python1441024224

• boostsecurityio/lotp

  boostsecurityio/lotp

  Language:HTML11293911

• SecuraBV/jws2pubkey

  jws2pubkey tool

  Language:Python38304

• PankajMoolrajani/PermCutter

  Spec and Sample code for Identifying and Reducing Permission Explosion

  Language:Jupyter Notebook1110