zee67

Havoc

The Havoc Framework.

sqli-dojo-docker

A demo PHP application used to exercise SQL injection techniques in a safe, local Docker environment

kubefirst

The Kubefirst Open Source Platform

awesome-k8s-tools

List of container/k8s tools.

PowerParse

PowerShell PE Parser

malice

VirusTotal Wanna Be - Now with 100% more Hipster

aws-guardduty-runbook-generator

Generates runbooks for GuardDuty findings

RedCloud-OS

RedCloudOS is a Cloud Adversary Simulation Operating System for Red Teams to assess the Cloud Security of Leading Cloud Service Providers (CSPs)

RedTeamOperations-PivotSuite

HHHash

HTTP Headers Hashing (HHHash) is a technique used to create a fingerprint of an HTTP server based on the headers it returns.

Awesome-CloudSec-Labs

Awesome free cloud native security learning labs. Includes CTF, self-hosted workshops, guided vulnerability labs, and research labs.

oio-sds

High Performance Software-Defined Object Storage for Big Data and AI, that supports Amazon S3 and Openstack Swift

ThreatMapper

Open Source Cloud Native Application Protection Platform (CNAPP)

Vulnerabilities-Unmasked

This repo tries to explain complex security vulnerabilities in simple terms that even a five-year-old can understand!

nzyme

Network Defense System.

matano

Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS

LOOBins

Living Off the Orchard: macOS Binaries (LOOBins) is designed to provide detailed information on various built-in "living off the land" macOS binaries and how they can be used by threat actors for malicious purposes.

awesome-detection-engineering

Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying malicious or unauthorized activity before it negatively impacts an individual or an organization.

Domain_checker

Domain_checker application is the trial/demo version for the new EASM (External Attack Surface Management) system called HydrAttack (hydrattack.com), the main idea of which is, based only on the domain name, find almost all of the subdomains and their top 100 open ports

my-arsenal-of-aws-security-tools

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

teler

Real-time HTTP Intrusion Detection

dexter

dexter is a Kubernetes OIDC helper with as much automation as possible

cloudfox

Automating situational awareness for cloud penetration tests.

governance

Oralyzer

Open Redirection Analyzer

algo

Set up a personal VPN in the cloud

awesome-opa

A curated list of OPA related tools, frameworks and articles

eraser

🧹 Cleaning up images from Kubernetes nodes

AWSGoat

AWSGoat : A Damn Vulnerable AWS Infrastructure

kubernetes-examples

This repo contains a bunch of Kubernetes examples