0xdabbad00

security_incidents_from_caching

Collection of incidents resulting from caching issues

cloudmapper

CloudMapper helps you analyze your Amazon Web Services (AWS) environments.

scripts

Scripts I use during pentest engagements.

cloudtracker

CloudTracker helps you find over-privileged IAM users and roles by comparing CloudTrail logs with current IAM policies.

aws-remediations

A Lambda Function to Remediate Common AWS Misconfigurations

trailblazer-aws

Blazing CloudTrail since 2018

grr

GRR Rapid Response: remote live forensics for incident response

threat_intel

Threat Intelligence APIs

AirIAM

Least privilege AWS IAM Terraformer

aws-consolidated-admin

Do not use

grr-doc

Documentation for the GRR Rapid Reponse framework

HolisticInfoSec-For-WebDevelopers-Fascicle1

:books: VPS :lock: Network :lock: Cloud :lock: Web Applications :books:

MozDef

MozDef: The Mozilla Defense Platform

multiregion-terraform

Example multi-region AWS Terraform application

parliament

AWS IAM linting library

aws-landing-zone-initiation

AWS Landing Zone Template

aws_pwn

A collection of AWS penetration testing junk

breach-list-database

A meta-database collecting resources that compile lists of breaches

cloudtrail-partitioner

elastalert

Easy & Flexible Alerting With ElasticSearch

fREedom

capstone based disassembler for extracting to binnavi

git-walk

Walk up and down in revisions of a Git repository.

open-cvdb

An open project to list all publicly known cloud vulnerabilities and CSP security issues

osquery

SQL powered operating system instrumentation, monitoring, and analytics.

policyuniverse

Expands Wildcards in AWS IAM Policies

security_monkey

Security Monkey

streamalert

StreamAlert is a serverless, realtime data analysis framework which empowers you to ingest, analyze, and alert on data from any environment, using datasources and alerting logic you define.

0xdabbad00.github.io

blog

cedar

tmp