mendel129

Awesome-CloudSec-Labs

Awesome free cloud native security learning labs. Includes CTF, self-hosted workshops, guided vulnerability labs, and research labs.

passbolt_api

Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!

server

Bitwarden infrastructure/backend (API, database, Docker, etc).

vaultwarden

Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs

amazon-cognito-passwordless-auth

Passwordless authentication with Amazon Cognito: FIDO2 (WebAuthn, support for Passkeys), Magic Link, SMS OTP Step Up

PSBits

Simple (relatively) things allowing you to dig a bit deeper than usual.

yatas

:owl::mag_right: A simple tool to audit your AWS/GCP infrastructure for misconfiguration or potential security issues with plugins integration

IRM

Incident Response Methodologies 2022

aws-incident-response-playbooks

aws-customer-playbook-framework

This repository provides sample templates for security playbooks against various scenarios when using Amazon Web Services.

security-labs-pocs

Proof of concept code for Datadog Security Labs referenced exploits.

security-study-plan

Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...

DevSecOps

Ultimate DevSecOps library

DeTTECT

Detect Tactics, Techniques & Combat Threats

gimme-aws-creds

A CLI that utilizes Okta IdP via SAML to acquire temporary AWS credentials

IoT-Security-Verification-Standard-ISVS

OWASP IoT Security Verification Standard (ISVS)

apk-mitm

🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection

cloudfox

Automating situational awareness for cloud penetration tests.

APIKit

APIKit：Discovery, Scan and Audit APIs Toolkit All In One.

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

paseto

Platform-Agnostic Security Tokens

prowler

Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more

aws-vault

A vault for securely storing and accessing AWS credentials in development environments

awspx

A graph-based tool for visualizing effective access and resource relationships in AWS environments.

cloudgoat

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

cyber_leadership_slide_examples

nviso-cti

bad-practices

CISA's catalog of bad practices that are exceptionally risky.

codechecker

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy

Adalanche

Active Directory ACL Visualizer and Explorer - who's really Domain Admin? (Commerical versions available from NetSection)