maks303 Goto Github PK

ansible

Ansible is a radically simple IT automation platform that makes your applications and systems easier to deploy and maintain. Automate everything from code deployment to network configuration to cloud management, in a language that approaches plain English, using SSH, with no agents to install on remote systems. https://docs.ansible.com.

api-firewall

Fast and light-weight API proxy firewall for request and response validation by OpenAPI specs.

attack-scripts

Scripts and a (future) library to improve users' interactions with the ATT&CK content

awesome-azure-architecture

AWESOME-Azure-Architecture

awesome-cloud-security

🛡️ Awesome Cloud Security Resources ⚔️

awesome-osint

:scream: A curated list of amazingly awesome OSINT

aws-secure-environment-accelerator

The AWS Secure Environment Accelerator is a tool designed to help deploy and operate secure multi-account, multi-region AWS environments on an ongoing basis. The power of the solution is the configuration file which enables the completely automated deployment of customizable architectures within AWS without changing a single line of code.

awsgoat

AWSGoat : A Damn Vulnerable AWS Infrastructure

azure-cis

Automate Azure subscription check against CIS Benchmark

azure-sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

azuread-attack-defense

This publication is a collection of various common attack scenarios on Azure Active Directory and how they can be mitigated or detected.

azuregoat

AzureGoat : A Damn Vulnerable Azure Infrastructure

canadapubsecalz

This reference implementation is based on Cloud Adoption Framework for Azure and provides an opinionated implementation that enables ITSG-33 regulatory compliance by using NIST SP 800-53 Rev. 4 and Canada Federal PBMM Regulatory Compliance Policy Sets.

certified-kubernetes-security-specialist

defenderatp-proactive-threat-hunting-queries-kql

List of custom developed KQL queries to help proactive security teams hunt for opportunistic and sophisticated threat activity by developing custom TTP'S from red-teaming engagements & simulations with the strategic goal to prevent threats before they have the opportunity to execute

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

faraday

Open Source Vulnerability Management Platform

faraday_agent_dispatcher

Faraday Agent Dispatcher launches any security tools and send results to Faradaysec Platform.

gocastsdevguide

Companion Repo to https://www.udemy.com/go-the-complete-developers-guide/

gotestwaf

An open-source project in Golang to test different web application firewalls (WAF) for detection logic and bypasses

hunting-queries-detection-rules

Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

kube-bench

Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark

lkrg

Linux Kernel Runtime Guard

macos_security

macOS Security Compliance Project

microsoft-azure-cis-foundations-baseline

(WIP) CIS Microsoft Azure Foundations Benchmark

mihariosint

A tool for OSINT based threat hunting

monkey

Infection Monkey - An open-source adversary emulation platform

rippl

RIPPL is a tool that abuses a usermode only exploit to manipulate PPL processes on Windows

rustalgo

All Algorithms implemented in Rust

sadcloud

A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure