ygilani-ps

ygilani-ps's Stars

• center-for-threat-informed-defense/adversary_emulation_library

  An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

  Language:C1.7k313

• mitre-attack/attack-datasources

  This content is analysis and research of the data sources currently listed in ATT&CK.

  Language:Jupyter Notebook405105

• mitre-attack/attack-scripts

  Scripts and a (future) library to improve users' interactions with the ATT&CK content

  Language:Python583148

• olafhartong/ATTACKdatamap

  A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework

  Language:PowerShell35064

• mitre/caldera

  Automated Adversary Emulation Platform

  Language:Python5.6k1.1k

• aquasecurity/starboard

  Moved to https://github.com/aquasecurity/trivy-operator

  Language:Go1.3k197

• trufflesecurity/trufflehog

  Find, verify, and analyze leaked credentials

  Language:Go16.1k1.7k

• OWASP/DevSecOpsGuideline

  The OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.

  Language:Python842197

• OWASP/security-culture

  OWASP Security Culture repository

  Language:Shell33

• OWASP/raider

  OWASP Raider: a novel framework for manipulating the HTTP processes of persistent sessions

  Language:Python10323

• OWASP/apicheck

  Language:Python3620

• OWASP/Nettacker

  Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

  Language:Python3.5k765

• mike-goodwin/owasp-threat-dragon-desktop

  An installable desktop variant of OWASP Threat Dragon

  Language:CSS59489

• OWASP/threat-dragon

  An open source threat modeling tool from OWASP

  Language:JavaScript923248

• owasp-amass/amass

  In-depth attack surface mapping and asset discovery

  Language:Go12k1.9k

• OWASP/www-project-mobile-top-10

  Language:HTML8535

• GoogleContainerTools/distroless

  🥑 Language focused docker images, minus the operating system.

  Language:Starlark18.9k1.2k

• veracode-research/rogue-jndi

  A malicious LDAP server for JNDI injection attacks

  Language:Java1k221

• BishopFox/badPods

  A collection of manifests that will create pods with elevated privileges.

  Language:Shell591101

• carlospolop/Auto_Wordlists

  Language:Python1.1k239

• peass-ng/PEASS-ng

  PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

  Language:C#16k3.1k

• HackTricks-wiki/hacktricks

  Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

  Language:Python9k2.7k

• maddev-engenuity/AdversaryEmulation

  MAD ATT&CK Defender: ATT&CK Adversary Emulation Repository

  Language:Python10822

• swisskyrepo/PayloadsAllTheThings

  A list of useful payloads and bypass for Web Application Security and Pentest/CTF

  Language:Python61k14.6k

• carlospolop/PurplePanda

  Identify privilege escalation paths within and across different clouds

  Language:Python66382

• doitintl/secure-gcp-reference

  Best practice example for secure and compliant Google Cloud Platform infrastructure

  10028

• orcasecurity/orca-toolbox

  Language:Python10914