es1o

red-kube

Red Team K8S Adversary Emulation Based on kubectl

professional-programming

A collection of learning resources for curious software engineers

sus_params

suricata

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.

kubesploit

Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.

sliver

Adversary Emulation Framework

NTHW

Not The Hidden Wiki - The largest repository of links related to cybersecurity

OffensiveRust

Rust Weaponization for Red Team Engagements.

BloodHound

Six Degrees of Domain Admin

awesome-pentest-cheat-sheets

Collection of cheat sheets useful for pentesting

jaeger-distributed-tracing-demo

Parent project for Jaeger Distributed Tracing Demo

kubeletctl

A client for kubelet

Security-101

8 Lessons, Kick-start Your Cybersecurity Learning.

kubepug

Kubernetes PreUpGrade (Checker)

GTFOBins.github.io

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

bpf-developer-tutorial

eBPF Developer Tutorial: Learning eBPF Step by Step with Examples

review-checklists

This repo contains code and examples to operationalize Azure review checklists.

prowler

Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more

Azure-AccessPermissions

cloudfox

Automating situational awareness for cloud penetration tests.

ScoutSuite

Multi-Cloud Security Auditing Tool

atlantis

Terraform Pull Request Automation

codeql

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

VulnerableAzure

Terraform playbook of a vulnerable Azure deployment

awesome-azure-security

A curated list of awesome Microsoft Azure Security tools, guides, blogs, and other resources.

osmedeus

A Workflow Engine for Offensive Security

C2IntelFeeds

Automatically created C2 Feeds

nysm

nysm is a stealth post-exploitation container.

pwntools

CTF framework and exploit development library

crlfuzz

A fast tool to scan CRLF vulnerability written in Go