hansnewton

vagas-java

Mural de vagas para desenvolvedores Java

regvuln

RegVuln is a tool that use Engine Trivy to generate reports about images Docker from Registry, have integration with Defect Dojo to Vulnerability Management.

dockle

Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start

Docker-Security

Getting a handle on container security

rancher-vagrant

Rancher server & rancher agent in high availability on local environment with vagrant & virtualbox.

deployer

The PHP deployment tool with support for popular frameworks out of the box

541

vagrant-kubeadm-kubernetes

Vagrantfile & Scripts to setup Kubernetes Cluster using Kubeadm for CKA, CKAD and CKS practice environment

WhatWeb

Next generation web scanner

sakai-react

Free React Admin Template

osrmt

Open Source Requirements Management Tool

apache-tomcat-9.0-CIS-Benchmark-script

Apache Tomcat 9.0 CIS Benchmark Automation Script

CVE-2021-44228_scanner

Scanners for Jar files that may be vulnerable to CVE-2021-44228

a10-acos-axapi

Collection of ACOS AXAPI Ansible modules

retire.js

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

wstg

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

gvm-containers

Greenbone Vulnerability Management Containers

ansible-collection-hardening

This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL

codechecker

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy

coreruleset

OWASP CRS (Official Repository)

xss-payload-list

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

Libellux-Up-and-Running

Install open-source software from source to focus on Zero Trust Network principles, enhancing security for existing applications, and deploying tools for threat detection and prevention.

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

dca-prep-guide

Docker Certification Associate preparation guide - a list of resources to help you prepare for a successful certification

java_sec_demo

Sources and documentation for a Java security demo

TheHive

TheHive: a Scalable, Open Source and Free Security Incident Response Platform

Cortex

Cortex: a Powerful Observable Analysis and Active Response Engine

prometheus-curso-monitoring

CURSO PROMETHEUS E GRAFANA: Observability in a real world

archerysec

ASOC, ASPM, DevSecOps, Vulnerability Management Using ArcherySec.

dagda

a tool to perform static analysis of known vulnerabilities, trojans, viruses, malware & other malicious threats in docker images/containers and to monitor the docker daemon and running docker containers for detecting anomalous activities