rung

supply-chain-security-book.github.io

seccamp2022-b5b7

websocat

Command-line client for WebSockets, like netcat (or curl) for ws:// with advanced socat-like functions

GCPSketchnote

If you are looking to become a Google Cloud Engineer , then you are at the right place. GCPSketchnote is series where I share Google Cloud concepts in quick and easy to learn format.

cue

The home of the CUE language! Validate and define text-based and dynamic configuration

webvm

Virtual Machine for the Web

ebpf-beginners

The beginner's guide to eBPF

libbpfgo

eBPF library for Go. Powered by libbpf.

ssc-reading-list

A reading list for software supply-chain security.

crack-sec-eng-interviews

Cracking the Security Engineer Interviews

DDexec

A technique to run binaries filelessly and stealthily on Linux by "overwriting" the shell's process with another.

attack-flow

Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows for a small corpus of incidents, and creating visualization tools to display attack flows.

bouheki

bouheki is KRSI(eBPF+LSM) based Linux security auditing tool.

apko

Build OCI images from APK packages directly without Dockerfile

ccl_chromium_reader

(Sometimes partial) Python re-implementations of the technologies involved in reading various data sources in Chrome-esque applications.

fastonosql

FastoNoSQL is a crossplatform Redis, Memcached, SSDB, LevelDB, RocksDB, UnQLite, LMDB, ForestDB, Pika, Dynomite, KeyDB GUI management tool.

LevelDBDumper

Dumps all of the Key/Value pairs from a LevelDB database

plyvel

Plyvel, a fast and feature-rich Python interface to LevelDB

AzureADAssessment

Tooling for assessing an Azure AD tenant state and configuration

awesome-security-newsletters

Periodic cyber security newsletters that capture the latest news, summaries of conference talks, research, best practices, tools, events, vulnerabilities, and analysis of trending threats and attacks

webrisk

it-depends

A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositories.

AzureAD-Attack-Defense

This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can be mitigated or detected.

goproxy

An HTTP proxy library for Go

fulcio

Sigstore OIDC PKI

hardentools

Hardentools simply reduces the attack surface on Microsoft Windows computers by disabling low-hanging fruit risky features.

auth

A GitHub Action for authenticating to Google Cloud.

gitoops

all paths lead to clouds

OSEP-Code-Snippets

A repository with my notable code snippets for Offensive Security's PEN-300 (OSEP) course.

defcon_27_windbg_workshop

DEFCON 27 workshop - Modern Debugging with WinDbg Preview

scorecard

OpenSSF Scorecard - Security health metrics for Open Source