security-automation

There are 145 repositories under security-automation topic.

wazuh / wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
security compliance log-analysis vulnerability-detection cybersecurity file-integrity-monitoring infosec malware-detection cloud-security container-security security-automation security-tools siem xdr configuration-assessement incident-response pci-dss security-audit security-hardening wazuh
Language:C 13479
future-architect / vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
vuls vulnerability-scanners golang go linux freebsd vulnerability-detection security security-tools cybersecurity security-vulnerability security-scanner security-hardening security-automation security-audit vulnerability-assessment vulnerability-management vulnerability-scanner vulnerabilities administrator
Language:Go 11739
xonsh
xonsh / xonsh
:shell: Python-powered shell. Full-featured and cross-platform.
python xonsh shell cli command-line console bash devops fish zsh iterm2 data-science data-engineering security-automation raspberry-pi artificial-intelligence
Language:Python 8971
Scanners-Box
We5ter / Scanners-Box
A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑
pentesting-tools hacker-tools vulnerability-scanners information-security redteam-tools penetration-testing devsecops security-automation smart-contracts privacy-compliance apk-analysis binary-analysis exploitation-framework malware-analysis security-audit code-analyzer static-analysis wifi-hacking wifi-security
8642
securego / gosec
Go security checker
golang security security-tools security-automation static-analysis static-code-analysis
Language:Go 8441
monkey
guardicore / monkey
Infection Monkey - An open-source adversary emulation platform
adversary-emulation infection-monkey penetration-testing security-automation security-tools
Language:Python 6774
caldera
mitre / caldera
Automated Adversary Emulation Platform
adversary-emulation caldera cybersecurity hacking mitre mitre-attack mitre-corporation red-team security-automation security-testing
Language:Python 6420
infobyte / faraday
Open Source Vulnerability Management Platform
devops penetration-testing vulnerability vulnerability-scanners security security-audit pentesting continuous-scanning infosec vulnerability-management collaboration burpsuite nessus nmap devsecops security-automation orchestration cve appsec cybersecurity
Language:Python 5941
DefectDojo / django-DefectDojo
Open-Source Unified Vulnerability Management, DevSecOps & ASPM
python vulnerability-databases django security owasp analytics vulnerability-management automation security-automation security-orchestration devsecops vulnerability-correlation kubernetes hacktoberfest appsec
Language:HTML 4201
builtbybel / privatezilla
👀👮🐢🔥Performs a privacy & security check of Windows 10
windows-10 privacy privacy-protection telemetry security security-automation powershell debloat
Language:C# 3723
dependency-track
DependencyTrack / dependency-track
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
owasp appsec security bom vulnerabilities component-analysis nvd software-security software-composition-analysis sca bill-of-materials package-url purl vulnerability-detection ossindex sbom devsecops security-automation cyclonedx hacktoberfest
Language:Java 3230
Yamato-Security / hayabusa
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
dfir threat hunting windows event logs rust sigma detection attack forensics incident response hayabusa yamato security cybersecurity incident-response security-automation threat-hunting
Language:Rust 2828
flipkart-incubator / Astra
Automated Security Testing For REST API's
security restapiautomation python owasp penetration-testing-framework postman-collection ci-cd sdlc penetration-testing security-automation
Language:Python 2611
ComplianceAsCode / content
Security automation content in SCAP, Bash, Ansible, and other formats
security compliance scap xccdf oval cpe cce usgcb pci-dss ospp stig application-security security-tools security-hardening security-automation security-profile hardening information-security cybersecurity ansible
Language:Shell 2531
bearer
Bearer / bearer
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
appsec compliance devsecops devsecops-tools security security-tools dataflow gdpr privacy sast static-code-analysis vulnerability security-audit security-scanner vulnerabilities code-quality static-analysis security-automation owasp
Language:Go 2398
cisagov / ScubaGear
Automation to assess the state of your M365 tenant against CISA's baselines
assessment-tool cisa cybersecurity m365 open-policy-agent open-source powershell rego scuba security security-automation contributions-welcome scubaconnect
Language:PowerShell 2296
aress31 / burpgpt
A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities and enables running traffic-based analysis of any type.
ai burp-extensions burpsuite cybersecurity gpt openai pentesting security security-automation webapp burp-plugin burpsuite-extender gpt-3 openai-api
Language:Java 2212
hisxo / gitGraber
gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...
security-tools monitor bugbounty security-automation osint redteam realtime leaks
Language:Python 2191
danieldurnea / FBI-tools
🕵️ OSINT Tools for gathering information and actions forensics 🕵️
forensics osint cybersecurity hacking security-automation security-tools infosec awesome-list incident-response penetration-testing reconnaissance security awesome pentesting bug-bounty
2089
fixinventory
someengineering / fixinventory
Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.
aws gcp infrastructure-as-code digitalocean security security-automation cnapp cspm cybersecurity policy-as-code security-audit
Language:Python 2032
Shuffle
Shuffle / Shuffle
Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.
agplv3 automation cybersecurity discord hacktoberfest integrations mitre-attack openapi orchestration orchestrator orchestrator-gui security security-automation security-orchestrator shuffle soar workflow-editor
Language:Shell 1902
SubDomainizer
nsonaniya2010 / SubDomainizer
A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.
python3 security-tools security-automation security subdomain-scanner subdomain-enumeration s3-bucket find-subdomains cloud-storage-services external-javascripts secrets secretfinder bugbounty find-secrets s3-buckets bug-bounty madeinindia
Language:Python 1829
w5
w5teams / w5
Security Orchestration, Automation and Response (SOAR) Platform. 安全编排与自动化响应平台，无需编写代码的安全自动化，使用 SOAR 可以让团队工作更加高效
soar hacking w5 w5soar tools hack security security-tools security-automation hacker python3 automation python-script security-audit devops shuffle walkoff
Language:Python 1532
GreenmaskIO / greenmask
PostgreSQL database anonymization and synthetic data generation tool
golang obfuscation postgresql security security-tools staging anonymization synthetic-data ai go pg security-automation testing-tools qa dba faker database automation transformers data-masking
Language:Go 1528
intel / cve-bin-tool
The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.
cve cvss devsecops hacktoberfest python sbom sbom-tool security security-automation security-tools swrepo system-tools vulnerabilities vulnerability
Language:Python 1502
konstruktoid / hardening
Hardening Ubuntu. Systemd edition.
ubuntu ubuntu-server shell hardening security security-hardening systemd security-tools security-automation security-compliance information-security hacktoberfest
Language:Shell 1483
Sooty
TheresAFewConors / Sooty
The SOC Analysts all-in-one CLI tool to automate and speed up workflow.
python soc security security-automation analysts automation reputation-check urlscan proofpoint-decoder phishing analysis dns workflow soc-analysts hash cybersecurity
Language:Python 1426
fkie-cad / FACT_core
Firmware Analysis and Comparison Tool
firmware-tools firmware-analysis security-automation security
Language:Python 1371
pacbot
tmobile / pacbot
PacBot (Policy as Code Bot)
cloud-security security aws continous-compliance cloud-auditing policy-as-code cloud security-automation aws-security java angularjs cloud-compliance-reporting cloud-native spring-boot
Language:Java 1297
cfn_nag
stelligent / cfn_nag
Linting tool for CloudFormation templates
continuous-testing unit-testing cloudformation aws devops iam-rules cloudformation-templates cfn-nag open-source static-analysis stelligent cfn lint linting amazon security security-automation cloudformation-security hacktoberfest compliance
Language:Ruby 1290
APTRS
APTRS / APTRS
Automated pentest reporting with custom templates, project tracking, customer dashboard and client management tools. Streamline your security workflows effortlessly!
infosec penetration-testing pentest pentest-report pentesting security security-automation
Language:TypeScript 1045
bitquark / shortscan
An IIS short filename enumeration tool
bugbounty security security-audit security-scanner security-tools iis iis-server pentesting pentesting-tools vulnerability-detection vulnerability-scanners iis-security redteam redteam-tools security-automation bugbounty-tool
Language:Go 1000
dropbox / securitybot
Distributed alerting for the masses!
bot duo slack security-automation
Language:Python 995
secureCodeBox
secureCodeBox / secureCodeBox
secureCodeBox (SCB) - continuous secure delivery out of the box
security security-automation security-tools security-testing securecodebox devsecops kubernetes kubernetes-operator owasp owasp-zap hacktoberfest
Language:JavaScript 875
betterscan
tcosolutions / betterscan
Code Scanning/SAST/Static Analysis/Linting using many tools/Scanners with One Report (Code, IaC) - Betterscan
sast code-quality code-quality-analyzer static-analysis static-code-analysis static-analyzers devsecops sonarqube compliance devops devops-tools gdpr owasp security-audit security-automation security-scanner security-tools vulnerability vulnerability-scanner security-orchestration
Language:Python 856
DataDog / KubeHound
Tool for building Kubernetes attack paths
adversary-emulation attack-graph attack-paths cloud-native-security exploit kubernetes kubernetes-security mitre-attack purple-team red-team security-audit security-automation security-tools
Language:Go 844