Repositories

AllAI SecurityAI/MLAPI & IntegrationAnalytics & BIBACKENDCI/CDCloud InfrastructureCloud SecurityCommunicationCompliance & GovernanceContainers & OrchestrationDEVOPSData EngineeringDevSecOpsDeveloper ToolsDocumentationFRONTENDIdentity & AccessIncident & ReliabilityMobileMonitoring & ObservabilityNETWORKINGOTHEROffensive SecurityProject ManagementSECURITYSOC & Incident ResponseServerlessStorage & DatabasesVulnerability Management

flipkart-incubator/Astra

Automated Security Testing For REST API's

⭐ 2,648🍴 413📝 PythonDevSecOps
40.6

score

goodwithtech/dockle

Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start

⭐ 3,267🍴 163📝 GoContainers & Orchestration
40.6

score

google/osv.dev

Open source vulnerability DB and triage service.

⭐ 2,768🍴 336📝 GoVulnerability Management
40.6

score

outflanknl/RedELK

Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

⭐ 2,648🍴 394📝 PythonSOC & Incident Response
40.6

score

Netflix/consoleme

A Central Control Plane for AWS Permissions and Access

⭐ 3,199🍴 282📝 PythonCloud Security
40.6

score

Checkmarx/kics

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

⭐ 2,657🍴 374📝 Open Policy AgentCompliance & Governance
40.5

score

tj-actions/changed-files

:octocat: Github action to retrieve all (added, copied, modified, deleted, renamed, type changed, unmerged, unknown) files and directories.

⭐ 2,705🍴 330📝 TypeScriptCI/CD
40.5

score

cisagov/RedEye

RedEye is a visual analytic tool supporting Red & Blue Team operations

⭐ 2,758🍴 288📝 TypeScriptOffensive Security
40.4

score

x90skysn3k/brutespray

Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.

⭐ 2,499🍴 431📝 GoOffensive Security
40.4

score

danieldurnea/FBI-tools

🕵️ OSINT Tools for gathering information and actions forensics 🕵️

⭐ 2,545🍴 370Offensive Security
40.3

score

ajinabraham/nodejsscan

nodejsscan is a static security code scanner for Node.js applications.

⭐ 2,566🍴 347📝 CSSDevSecOps
40.3

score

4ndersonLin/awesome-cloud-security

🛡️ Awesome Cloud Security Resources ⚔️

⭐ 2,460🍴 371Cloud Security
40.2

score

bridgecrewio/terragoat

TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

⭐ 1,296🍴 5,806📝 HCLCloud Infrastructure
40.1

score

Lifka/hacking-resources

Hacking resources and cheat sheets. References, tools, scripts, tutorials, and other resources that help offensive and defensive security professionals.

⭐ 2,562🍴 262SOC & Incident Response
40.0

score

ContainerSSH/ContainerSSH

ContainerSSH: Launch containers on demand

⭐ 3,061🍴 106📝 GoContainers & Orchestration
39.9

score

BishopFox/cloudfox

Automating situational awareness for cloud penetration tests.

⭐ 2,510🍴 243📝 GoCloud Security
39.9

score

DataDog/stratus-red-team

:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud

⭐ 2,351🍴 303📝 GoCloud Infrastructure
39.8

score

Bearer/bearer

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

⭐ 2,690🍴 142📝 GoCompliance & Governance
39.6

score

Idov31/Nidhogg

Windows rootkit for Intel x64 with 25+ features, demonstrating rootkit techniques compatible with all Windows 10 and Windows 11 versions.

⭐ 2,422🍴 357📝 C++Offensive Security
39.6

score

center-for-threat-informed-defense/adversary_emulation_library

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

⭐ 2,129🍴 367📝 CSOC & Incident Response
39.5

score

PrevPage 22 of 26Next