A tool to audit Erlang & Elixir dependencies, to make sure your gleam projects really sparkle! ✨

A humble, and 𝗳𝗮𝘀𝘁, security-oriented HTTP headers analyzer.

Code Scanning/SAST/Static Analysis/Linting using many tools/Scanners + OpenAI GPT with One Report (Code, IaC) - Betterscan Community Edition (CE)

MiniGreX will be designed with security in mind, and the code will be written to minimize the risk of SQL injection attacks and other security vulnerabilities. To ensure maximum security, we recommend keeping the CMS up-to-date with the latest security patches and using strong passwords for all user accounts.

Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more

The main goal of this project is the configuration and control of various types of devices operating in a corporate environment. Information security is the main direction of development. Roles have default settings that can be dynamically overridden using "inventories" folder rules based on subnet, host group (organizational unit or branch), OS.

Github action to run PyCQA's bandit security linter.

Audit your PHP version for known CVEs and patches

Audit your Node version for known CVEs and patches

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

Cloud Security Posture Management (CSPM)

🔥 A fully open source audit logs service and embeddable UI easily deployed to your own Kubernetes cluster. Brought to you by replicated.com and boxyhq.com 🚀

Report writing and vulnerability management platform.

A curated list of cryptography resources and links. With repository stars⭐ and forks🍴

My useful files for penetration tests, security assessments, bug bounty and other security related stuff

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

AWS CloudSaga - Simulate security events in AWS

Kubernetes Attack Graph

Pen Test Report Generation and Assessment Collaboration

Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.