pealtrufo

pealtrufo's Stars

• k88hudson/git-flight-rules

  Flight rules for git

  41.7k655733.2k

• aquasecurity/trivy

  Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

  Language:Go22.8k1682.6k2.2k

• blaCCkHatHacEEkr/PENTESTING-BIBLE

  articles

  12.8k681242.3k

• kgretzky/evilginx2

  Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

  Language:Go10.6k2988701.9k

• kubescape/kubescape

  Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.

  Language:Go10.1k99477831

• veeral-patel/how-to-secure-anything

  How to systematically secure anything: a repository about security engineering

  9.9k2256687

• kyverno/kyverno

  Cloud Native Policy Management

  Language:Go5.5k443.5k838

• ossf/scorecard

  OpenSSF Scorecard - Security health metrics for Open Source

  Language:Go4.4k671.1k481

• RhinoSecurityLabs/pacu

  The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

  Language:Python4.3k110127686

• madhuakula/kubernetes-goat

  Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

  Language:HTML4.2k5654694

• inonshk/31-days-of-API-Security-Tips

  This challenge is Inon Shkedy's 31 days API Security Tips.

  2.1k632332

• cncf/tag-security

  🔐CNCF Security Technical Advisory Group -- secure access, policy control, privacy, auditing, explainability and more!

  Language:HTML2k158529505

• OWASP/API-Security

  OWASP API Security Project

  Language:Dockerfile2k15976371

• magnologan/awesome-k8s-security

  A curated list for Awesome Kubernetes Security resources

  1.9k692279

• krol3/container-security-checklist

  Checklist for container security - devsecops practices

  1.5k371213

• aquasecurity/starboard

  Moved to https://github.com/aquasecurity/trivy-operator

  Language:Go1.3k27279197

• ossf/allstar

  GitHub App to set and enforce security policies

  Language:Go1.2k31163123

• OWASP/wrongsecrets

  Vulnerable app with examples showing how to not use secrets

  Language:Java1.2k18235333

• ksoclabs/awesome-kubernetes-security

  A curated list of awesome Kubernetes security resources

  8943310122

• StyraInc/awesome-opa

  A curated list of OPA related tools, frameworks and articles

  77622576

• jatrost/awesome-kubernetes-threat-detection

  A curated list of resources about detecting threats and defending Kubernetes systems.

  35610033

• iacsecurity/tool-compare

  Language:HCL275142159

• madhuakula/hacker-container

  The Swiss Army Container for Cloud Native Security. Container with all the list of useful tools/commands while hacking and securing Containers, Kubernetes Clusters, and Cloud Native workloads.

  Language:Dockerfile25813663

• developer-guy/awesome-falco

  A curated list of Falco related tools, frameworks, blogs, podcasts, and articles

  19813120

• raspbernetes/k8s-security-policies

  This repository offers a comprehensive library of security policies designed to enhance the security of Kubernetes cluster configurations. The policies are developed in accordance with the CIS Kubernetes benchmark.

  Language:Open Policy Agent176151324

• salesforce/dockerfile-image-update

  A tool that helps you get security patches for Docker images into production as quickly as possible without breaking things

  Language:Java136124348

• Santandersecurityresearch/corsair_scan

  Corsair_scan is a security tool to test Cross-Origin Resource Sharing (CORS).

  Language:Python1229615

• aquasecurity/appshield

  Security configuration checks for popular cloud native applications and infrastructure.

  Language:Open Policy Agent118162337

• Santandersecurityresearch/DrHeader

  drHEADer helps with the audit of security headers received in response to a single request or a list of requests.

  Language:Python105114925

• dependency-check/Dependency-Check_Action

  Github action to run dependency check

  Language:Dockerfile6961931