yooninjung Goto Github PK

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

attacking-cloudgoat2

A step-by-step walkthrough of CloudGoat 2.0 scenarios.

awesome-docker-security

📚 A curated list of awesome Docker security resources

awsgoat

AWSGoat : A Damn Vulnerable AWS Infrastructure

bad-dockerfile

A Dockerfile that creates an image with known vulnerabilities.

bank-of-anthos

Bank of Anthos is a sample HTTP-based web app that simulates a bank's payment processing network, allowing users to create artificial bank accounts and complete transactions.

belloga-backend

Software Maestro 13th Belloga Backend Repository

bicepgoat

BicepGoat is Bridgecrew's "Vulnerable by Design" Bicep and ARM repository. BicepGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

caldera

Automated Adversary Emulation Platform

centos_vuln_check_script

cfngoat

Cfngoat is Bridgecrew's "Vulnerable by Design" Cloudformation repository. Cfngoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

cloud-penetration-testing

A curated list of cloud pentesting resource, contains AWS, Azure, Google Cloud

cloud-pentest

Resources to learn cloud environment and pentesting the same, contains AWS, Azure, Google Cloud

cloudgoat

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

codegoat

Sample repo of errors, misconfigurations, and vulnerabilities for Bridgecrew and Prisma Cloud Code Security

demisto-content

Demisto is now Cortex XSOAR. Automate and orchestrate your Security Operations with Cortex XSOAR's ever-growing Content Repository. Pull Requests are always welcome and highly appreciated!

iac-demo

iam-vulnerable

Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.

kaimonkey

KaiMonkey provides vulnerable infrastructure as code (IaC) to help explore and understand common cloud security threats exposed via IaC.

kube-goat

A deliberately vulnerable Kubernetes cluster

kube_security_lab

kubernetes-goat

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

kustomizegoat

Vulnerable Kustomize Kubernetes templates for training and education

linux-malware

Tracking interesting Linux (and UNIX) malware. Send PRs

localstack-terraform-samples

Repository with terraform samples for LocalStack

malware-cryptominer-container

Container image with malware and crypto miner for testing purposes

openapi-specification

The OpenAPI Specification Repository

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

popular-containers-vulnerability-checks

Vulnerabilities in popular container images