Gby56

trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

kubeshark

The API traffic analyzer for Kubernetes providing real-time K8s protocol-level visibility, capturing and monitoring all traffic and payloads going in, out and across containers, pods, nodes and clusters. Inspired by Wireshark, purposely built for Kubernetes

semgrep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

ScoutSuite

Multi-Cloud Security Auditing Tool

cve

Gather and update all available and newest CVEs with their PoC.

dredd

Language-agnostic HTTP API Testing Tool

django-DefectDojo

DevSecOps, ASPM, Vulnerability Management. All on one platform.

ASVS

Application Security Verification Standard

restler-fuzzer

RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.

scream

Virtual network sound card for Microsoft Windows

guac

GUAC aggregates software security metadata into a high fidelity graph database.

cfn-diagram

CLI tool to visualise CloudFormation/SAM/CDK stacks as visjs networks, draw.io or ascii-art diagrams.

ebpfkit

ebpfkit is a rootkit powered by eBPF

xdpcap

tcpdump like XDP packet capture

ghapi

A delightful and complete interface to GitHub's amazing API

openapi-fuzzer

Black-box fuzzer that fuzzes APIs based on OpenAPI specification. Find bugs for free!

entitlements-app

The Ruby Gem that Powers Entitlements - GitHub's Identity and Access Management System

APIFuzzer

Fuzz test your application using your OpenAPI or Swagger API definition without coding

continuous-threat-modeling

A Continuous Threat Modeling methodology

mvsp

Minimum Viable Secure Product mvsp.dev

ggcanary

GitGuardian Canary Tokens

ebpfkit-monitor

ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits

elevation-of-privilege

An online multiplayer version of the Elevation of Privilege (EoP) threat modeling card game

xss-validator

This is a burp intruder extender that is designed for automation and validation of XSS vulnerabilities.

pin-github-action

Pin your GitHub actions to a specific hash

spring-rce-vulnerable-app

Spring Boot web application vulnerable to Log4Shell (CVE-2021-44228) and the possible Spring RCE vulnerability.

spython

Example implementations of PEP 578 and 551 entry points

security-alert

[GitHub] A Command Line ToolKit for GitHub Security Alert.

common-requirement-enumeration

log4shell-mitigation-tester

Log4Shell CVE-2021-44228 mitigation tester