chhajershrenik Goto Github PK

docker-bench-security

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

dockerfile-security

A collection of OPA rules to statically analyze Dockerfiles to improve security

documentation

Documentation for the confidential containers project

domain-protect

Protect against subdomain takeover

domain-protect-gcp

Protect against subdomain takeover

enumerate-iam

Enumerate the permissions associated with AWS credential set

eos-smart-contract-security-best-practices

A guide to EOS smart contract security best practices

f5-ansible

Ansible modules that can manipulate F5 products

falco_rules

Falco threat detection rules for Cloud-Native runtime security - Kubernetes

filterbypass

Browser's XSS Filter Bypass Cheat Sheet

finalrecon

The Last Web Recon Tool You'll Need

functional-safety-of-lane-assistance-system

Project: Functional Safety of a Lane Assistance System | Udacity: Self-Driving Car Engineer Nanodegree

fuxploider

File upload vulnerability scanner and exploitation tool.

fuzzhttpbypass

This tool use fuuzzing to try to bypass unknown authentication methods, who knows...

gcp-iam-privilege-escalation

A collection of GCP IAM privilege escalation methods documented by the Rhino Security Labs team.

gitoops

all paths lead to clouds

gng_ico

goodhound

Uses Sharphound, Bloodhound and Neo4j to produce an actionable list of attack paths for targeted remediation.

hacks

A collection of hacks and one-off scripts

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

harbor

An open source trusted cloud native registry project that stores, signs, and scans content.

howtohunt

Tutorials and Things to Do while Hunting Vulnerability.

httpleaks

HTTPLeaks - All possible ways, a website can leak HTTP requests

ibm.qradar

IBM QRadar Ansible Collection

ics-security-tools

Tools, tips, tricks, and more for exploring ICS Security.

infosec_reference

An Information Security Reference That Doesn't Suck

inql

InQL - A Burp Extension for GraphQL Security Testing

inspektor-gadget

Collection of gadgets for debugging and introspecting Kubernetes applications using BPF

intelowl

Intel Owl: analyze files, domains, IPs in multiple ways from a single API at scale

js-scp

JavaScript Secure Coding Practices guide