cloudnative-security Goto Github PK

pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

passivedns

A network sniffer that logs all DNS server replies for use in a passive DNS setup

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

picoctf

The platform used to run picoCTF 2019.

policy_sentry

IAM Least Privilege Policy Generator

pomerium

Pomerium is an identity-aware access proxy.

preflight

Automatically perform Kubernetes cluster configuration checks using Open Policy Agent (OPA)

prometheus-playground

Turnkey sandbox projects demonstrating a wide variety of Prometheus use cases

prometheus-workshop

Workshop: Cloud Native Monitoring with Prometheus & Grafana

prowler

Prowler is a security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains all CIS controls listed here https://d0.awsstatic.com/whitepapers/compliance/AWS_CIS_Foundations_Benchmark.pdf and more than 100 additional checks that help on GDPR, HIPAA and other security requirements.

proxify

Swiss Army knife Proxy tool for HTTP/HTTPS traffic capture, manipulation, and replay on the go.

python-jose

A JOSE implementation in Python

quickstart-workshop

rest-api-tutorial

This is a sample source code for the article published on Toptal: https://www.toptal.com/nodejs/secure-rest-api-in-nodejs

sample-node-api

A sample node js api for finding cars and accounts for a dealership

securesoftwaresupplychain

This repo is a consolidation of Secure Software Supply Chain resources, such as talks, whitepapers, conferences and more.

siege

Siege is an http load tester and benchmarking utility

spring4shell-poc

springshell

Spring4Shell - Spring Core RCE - CVE-2022-22965

subfinder

Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.

subjack

Subdomain Takeover tool written in Go

sublist3r

Fast subdomains enumeration tool for penetration testers

tag-security

🔐CNCF Security Technical Advisory Group -- secure access, policy control, privacy, auditing, explainability and more!

terraform-aws-ec2-instance-reverse-shell

Offensive Terraform module which creates EC2 instance and reverse shell from an EC2 instance to attacker machine.

terraform-ecs-prowler

Setting up Prowler to run in a set of containers on ECS and save to S3

terragoat

TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

terrascan

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

thezoo

A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.

tm-scanner

websites vulnerability scanner for termux

todo-fullstack-app-go-gin-postgres-react

A fullstack Todo List built using Go/Gin/Postgres/React stack deployed using docker-compose