rung

seccamp-2023-sandbox-service

saas-attacks

Offensive security drives defensive security. We're sharing a collection of SaaS attack techniques to help defenders understand the threats they face. #nolockdown

json-diff

Structural diff for JSON files

jd

JSON diff and patch

shavar

Tracking Protection update service for Firefox based on Safe Browsing protocol

rubocop-github

Code style checking for GitHub's Ruby projects

slsa-github-generator

Language-agnostic SLSA provenance generation for Github Actions

slsa-verifier

Verify provenance from SLSA compliant builders

clank

Simple tool that allows you to detect imposter commits in GitHub Actions workflows.

detection-rules

Collection of YARA-L 2.0 sample rules for the Chronicle Detection API

awesome-threat-detection

✨ A curated list of awesome threat detection and hunting resources 🕵️‍♂️

OSCAR

A comprehensive, systematic and actionable way to understand attacker behaviors and techniques with respect to the software supply chain

gitlab-comment

About gitlab-comment is a CLI command to post Merge Request Note.

crossplane

The Cloud Native Control Plane

shisho

Lightweight static analyzer for several programming languages

tetragon

eBPF-based Security Observability and Runtime Enforcement

policy-controller

Sigstore Policy Controller - an admission controller that can be used to enforce policy on a Kubernetes cluster based on verifiable supply-chain metadata from cosign

melange

build APKs from source code

darkfiles

Darkfiles finds orphaned files in container images and makes them to bad deeds

phishing_kits

Exposing phishing kits seen from phishunt.io

cloud-security-vulnerabilities

List of all the Publicly disclosed vulnerabilities of Public Cloud Provider like Amazon Web Services (AWS), Microsoft Azure, Google Cloud, Oracle Cloud, IBM Cloud etc

awesome-cloud-security

A curated list of awesome cloud security blogs, podcasts, standards, projects, and examples.

headscale

An open source, self-hosted implementation of the Tailscale control server

egress-operator

A Kubernetes operator to produce egress gateway Envoy pods and control access to them with network policies

fuzzit

CLI to integrate continuous fuzzing with Fuzzit (no longer available)

selinux-notebook

The SELinux Notebook

drawio-threatmodeling

Draw.io libraries for threat modeling diagrams

awesome-gcp-pentesting

Tools and blogs I use to perform GCP red teams

seccamp-2022

セキュリティ・キャンプ 2022 B6

vulbr

Toy browser on single process / thread