anunay-bhatt

awesome-gpt-security

A curated list of awesome security tools, experimental case or other interesting things with LLM or GPT.

gpt3_security_vulnerability_scanner

GPT-3 found hundreds of security vulnerabilities in this repo

SecGPT

A Test Project for a Network Security-oriented LLM Tool Emulating AutoGPT

websec-answers

Websec interview questions by tib3rius answered

awesome-threat-modelling

A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.

awesome-cloudnative-trainings

Awesome Trainings from Cloud Native Computing Foundation Projects and Kubernetes related software

recon_profile

NodeGoat

The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.

Vulnerable-OAuth-2.0-Applications

vulnerable OAuth 2.0 applications: understand the security implications of your OAuth 2.0 decisions.

cloud_enum

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

subfinder

Fast passive subdomain enumeration tool.

amass

In-depth attack surface mapping and asset discovery

API-SecurityEmpire

API Security Project aims to present unique attack & defense methods in API Security field

inventory

Asset inventory of over 800 public bug bounty programs.

API-SecurityEmpire

API Security Project aims to present unique attack & defense methods in API Security field

top-10-cicd-security-risks

awesome-cicd-security

:books: A curated list of awesome CI CD security resources

Web-Cache-Vulnerability-Scanner

Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).

XSRFProbe

The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.

clusterfuzzlite

ClusterFuzzLite - Simple continuous fuzzing that runs in CI.

threat-matrix-cicd

Threat matrix for CI/CD Pipeline

Top10

Official OWASP Top 10 Document Repository

awesome-kubernetes-security

A curated list of awesome Kubernetes security resources

compute-image-tools

Tools and scripts for Google Compute Engine images.

policy_sentry

IAM Least Privilege Policy Generator

iamlive

Generate an IAM policy from AWS, Azure, or Google Cloud (GCP) calls using client-side monitoring (CSM) or embedded proxy

CheatSheetSeries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

gcp_api_key_inventory

Inventory, analyze, and report on your GCP API keys in an automated fashion.

project_lockdown

GCP Auto Remediation Suite for High Risk Events

gcp_sa_lister

Crawls your GCP Org and returns service accounts that have not been used in the past 90 days.