dggsoares

secure-code-review-checklist

A starter secure code review checklist

GraphRunner

A Post-exploitation Toolset for Interacting with the Microsoft Graph API

node-jsonwebtoken

JsonWebToken implementation for node.js http://self-issued.info/docs/draft-ietf-oauth-json-web-token.html

steampipe

Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.

aws_consoler

A utility to convert your AWS CLI credentials into AWS console access.

hakrawler

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

Photon

Incredibly fast crawler designed for OSINT.

keycloak-on-aws

This is a solution for deploying Keycloak to AWS with high availability.

python-jose

A JOSE implementation in Python

keycloak-lambda-authorizer

Keycloak adapter for Cloud

guias-api

Material de referência para modelagem de serviços expostos via API

docker-elk

The Elastic stack (ELK) powered by Docker and Compose.

yabai

A tiling window manager for macOS based on binary space partitioning

30-API-security-tests

🚀 Join us for 30days of daily API security tests. #30days30tests We've spent last 120days building amazing API security tests for the community. Next 30 days we will post test tutorials here.

trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

grype

A vulnerability scanner for container images and filesystems

purple-team-exercise-framework

Purple Team Exercise Framework

snyk-api-import

⚡️Snyk API powered import tool to help you automate & monitor a large scale import into Snyk organizations. Designed for onboarding with a built in queue & retries 📈

snyk-intellij-plugin

Snyk Vulnerability Scanner for IDEs based on the IntelliJ platform

caido

🚀 Caido releases, wiki and roadmap

genai-code-review

DevSecOps-MaturityModel

lazygit

simple terminal UI for git commands

pom-explorer

A tool to aid managing lots of maven projects

tldextract

Accurately separates a URL’s subdomain, domain, and public suffix, using the Public Suffix List (PSL).

rich

Rich is a Python library for rich text and beautiful formatting in the terminal.

duf

Disk Usage/Free Utility - a better 'df' alternative

bat

A cat(1) clone with wings.

vcrpy

Automatically mock your HTTP interactions to simplify and speed up testing

backstage

Backstage is an open framework for building developer portals