Pinned Repositories
4QuestionFrame
Shostack's 4 Question Frame for Threat Modeling
AirIAM
Least privilege AWS IAM Terraformer
aksk_tool
AK资源管理工具，阿里云/腾讯云/华为云/AWS/UCLOUD/京东云/百度云/七牛云存储 AccessKey AccessKeySecret，利用AK获取资源信息和操作资源，ECS/CVM/E2/UHOST/ECI/BCC执行命令，OSS/COS/S3/BOS管理，RDS/DB管理，域名管理，添加RAM/CAM/IAM账号等
amazon-eks-custom-amis
Amazon EKS custom AMIs based on Red Hat Enterprise Linux, CentOS, Debian, Ubuntu, and Windows.
amazon-guardduty-automated-response-sample
Automated Amazon GuardDuty Security Response
amazon-guardduty-tester
This script is used to generate some basic detections of the GuardDuty service
automated-forensic-orchestrator-for-amazon-ec2
Automated Forensics Orchestrator for Amazon EC2 is a self-service AWS Solution implementation that enterprise customers can deploy to quickly set up and configure an automated orchestration workflow that enables their Security Operations Centre (SOC) to capture and examine data from EC2 instances and attached volumes as evidence for forensic analysis, in the event of a potential security breach. It will orchestrate the forensics process from the point at which a threat is first detected, enable isolation of the affected EC2 instances and data volumes, capture memory and disk images to secure storage, and trigger automated actions or tools for investigation and analysis of such artefacts. All the while, the solution will notify and report on its progress, status, and findings. It will enable SOC to continuously discover and analyze patterns of fraudulent activities across multi-account and multi-region environments. The solution will leverage native AWS services and be underpinned by a highly available, resilient, and serverless architecture, security, and operational monitoring features. Digital forensics is a 4 step process of triaging, acquisition, analysis and reporting. Automated Forensics framework provides capability to enterprise to act on security event by imaging or acquisition of breached resource for examination and generate forensic report about the security breach. In the event of a security breach, it will enable customers to easily to capture and examine required targeted data for forsensic’s storage and analysis. This solution framework enables security operations centre to discover and analyse patterns of fraudulent activities. The automated forensics solution will provide a multi-account and a multi-region [“solution”] built using native AWS services.
security-baseline-self-test
oodog0126's Repositories
oodog0126/security-baseline-self-test
oodog0126/AirIAM
Least privilege AWS IAM Terraformer
oodog0126/aksk_tool
AK资源管理工具，阿里云/腾讯云/华为云/AWS/UCLOUD/京东云/百度云/七牛云存储 AccessKey AccessKeySecret，利用AK获取资源信息和操作资源，ECS/CVM/E2/UHOST/ECI/BCC执行命令，OSS/COS/S3/BOS管理，RDS/DB管理，域名管理，添加RAM/CAM/IAM账号等
oodog0126/awesome-detection-engineering
A list of useful Detection Engineering-related resources.
oodog0126/awesome-detection-rules
This is a collection of threat detection rules / rules engines that I have come across.
oodog0126/awesome-selfhosted
A list of Free Software network services and web applications which can be hosted on your own servers
oodog0126/aws-config-rules
[Node, Python, Java] Repository of sample Custom Rules for AWS Config.
oodog0126/aws-guardduty-runbook-generator
Generates runbooks for GuardDuty findings
oodog0126/aws-imds-packet-analyzer
oodog0126/aws-pentesting-lab
Pentesting lab with a Kali Linux instance accessible via ssh & wireguard VPN and with vulnerable instances in a private subnet
oodog0126/cf
Cloud Exploitation Framework 云环境利用框架，方便安全人员在获得 AK 的后续工作
oodog0126/cloudtrail-cli
Blazing fast single purpose cli for CloudTrail log filtering
oodog0126/codon
A high-performance, zero-overhead, extensible Python compiler using LLVM
oodog0126/consoleme
A Central Control Plane for AWS Permissions and Access
oodog0126/csvGPT
csvGPT is an web app tool that enables users to upload CSV files, visualize the data, and have interactive conversations with an AI model.
oodog0126/curl-impersonate
curl-impersonate: A special build of curl that can impersonate Chrome & Firefox
oodog0126/cw-logs-insights-gpt
Chrome extension that generates CloudWatch Logs Insights queries from ChatGPT prompts
oodog0126/dufflebag
Search exposed EBS volumes for secrets
oodog0126/msticpy
Microsoft Threat Intelligence Security Tools
oodog0126/PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
oodog0126/peirates
Peirates - Kubernetes Penetration Testing tool
oodog0126/py2gpt
ChatGPT 背後的數學與程式
oodog0126/sandbox-accounts-for-events
"Sandbox Accounts for Events" allows to provide multiple, temporary AWS accounts to a number of authenticated users simultaneously via a browser-based GUI.
oodog0126/security-rules
Magpie security rules for AWS and GCP security configurations with policies mapping those rules to standards such as AWS CIS Benchmarks, PCI and HIPAA.
oodog0126/semgrep
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
oodog0126/smbsecassessment
oodog0126/sshscript
System Automation in Python
oodog0126/Stormspotter
Azure Red Team tool for graphing Azure and Azure Active Directory objects
oodog0126/waf-bypass
Check your WAF before an attacker does
oodog0126/whatismyip
Just another "what is my IP address" service, including geolocation and headers information. Written in go with high performance in mind.