houey Goto Github PK

misp-warninglists

Warning lists to inform users of MISP about potential false-positives or other information in indicators

mispnomer

Chrome extension for MISP IoC ingestion

modlishka

Modlishka. Reverse Proxy. Phishing NG.

muraena

Muraena is an almost-transparent reverse proxy aimed at automating phishing and post-phishing activities.

my-arsenal-of-aws-security-tools

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

npmdomaincheck-fork

Checks all maintainers of all NPM packages for hijackable domains

nuvola

one-time-use-presigned-url

An example of how one might leverage CloudFront to create one-time use presigned urls

opa

An open source, general-purpose policy engine.

opencti

Open Cyber Threat Intelligence Platform

openedr

Open EDR public repository

org-formation-cli

Better than landingzones!

pacbot

PacBot (Policy as Code Bot)

pacu

Rhino Security Labs' AWS penetration testing toolkit

patrolaroid

A production-friendly malware scanner for your AWS cloud

pmapper

A tool for quickly evaluating IAM permissions in AWS.

pocs

Proof of Concepts (PE, PDF...)

policy-templates

postmessage-tracker

A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon

procrustes

A bash script that automates the exfiltration of data over dns in case we have a blind command execution on a server where all outbound connections except DNS are blocked.

prowler

AWS Security Best Practices Assessment, Auditing, Hardening and Forensics Readiness Tool. It follows guidelines of the CIS Amazon Web Services Foundations Benchmark and additional checks. Official CIS for AWS guide: https://d0.awsstatic.com/whitepapers/compliance/AWS_CIS_Foundations_Benchmark.pdf

quiet-riot

AWS Enumeration and Footprinting Tool

regula

Regula checks Terraform for AWS, Azure and GCP security and CIS compliance using Open Policy Agent/Rego

resoto

Resoto creates an inventory of your cloud, provides deep visibility, and reacts to changes in your infrastructure. ⚡️

rlinklayer

Richard Linklayer: experimental TCP/IP over Amazon Cloudwatch Logs (and tags)

s3enum

Fast and stealthy Amazon S3 bucket enumeration tool for pentesters.

safer-signed-urls

S3-signed URLs that aren't easily misplaced

sceptre

Build better AWS infrastructure

scour

scout2

Security auditing tool for AWS environments