sujal11111

running-with-scissors

Resources from my KubeCon + CloudNativeCon keynote

docker-nginx-unprivileged

Unprivileged NGINX Dockerfiles

usernetes

Kubernetes without the root privileges

tracee

Linux Runtime Security and Forensics using eBPF

bane

Custom & better AppArmor profile generator for Docker containers.

skopeo

Work with remote images registries - retrieving information, images, signing content

libprocesshider

Hide a process under Linux using the ld preloader (https://sysdig.com/blog/hiding-linux-processes-for-fun-and-profit/)

kubeaudit

kubeaudit helps you audit your Kubernetes clusters against common security controls

kube-bench

Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark

kubesec

Security risk analysis for Kubernetes resources

kube-linter

KubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best practices.

python

Official Python client library for kubernetes

whoc

A container image that exfiltrates the underlying container runtime to a remote server

clair

Vulnerability Static Analysis for Containers

anchore-engine

A service that analyzes docker images and scans for vulnerabilities

docker_explorer

Scan DockerHub images that match a keyword to find secrets.

SecretScanner

:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:

falco

Cloud Native Runtime Security

kubescape

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.

gophish

Open-Source Phishing Toolkit

evilgophish

evilginx3 + gophish

xnLinkFinder

A python tool used to discover endpoints, potential parameters, and a target specific wordlist for a given target

mitmproxy2swagger

Automagically reverse-engineer REST APIs via capturing traffic

WhatWeb

Next generation web scanner

meg

Fetch many paths for many hosts - without killing the hosts

gowitness

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

zgrab2

Fast Go Application Scanner

smbmap

SMBMap is a handy SMB enumeration tool

nbio

Pure Go 1000k+ connections solution, support tls/http1.x/websocket and basically compatible with net/http, with high-performance and low memory cost, non-blocking, event-driven, easy-to-use.

spoonmap