A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities. Use c{api}tal to learn, train and exploit API Security vulnerabilities within your own API Security CTF.

Vulnerable app with examples showing how to not use secrets

The Python programming language

A simple app for SAST

☁️ ⚡ Granular, Actionable Adversary Emulation for the Cloud

Configuration files for the SOF-ELK VM, used in SANS FOR572

This repository contains the research and components of our research into using Sigma for AWS Incident Response.

CISO Assistant is a one-stop-shop for GRC, covering Risk, AppSec and Audit Management and supporting +70 frameworks worldwide with auto-mapping: NIST CSF, ISO 27001, SOC2, CIS, PCI DSS, NIS2, CMMC,…

Resource types that can be publicly exposed on AWS

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

Small and highly portable detection tests based on MITRE's ATT&CK.

GCPGoat : A Damn Vulnerable GCP Infrastructure

🙃 A delightful community-driven (with 2,400+ contributors) framework for managing your zsh configuration. Includes 300+ optional plugins (rails, git, macOS, hub, docker, homebrew, node, php, python…

A vault for securely storing and accessing AWS credentials in development environments

Assisted Log Enabler for AWS - Find AWS resources that are not logging, and turn them on.

DeRF (Detection Replay Framework) is an "Attacks As A Service" framework, allowing the emulation of offensive techniques and generation of repeatable detection samples in the cloud. Built on Google…

Public version of PagerDuty's employee security training courses.

Find and verify credentials

OWASP Foundation Web Respository

AzureGoat : A Damn Vulnerable Azure Infrastructure

Runs checks to see if an EKS cluster follows EKS Best Practices.

AWSGoat : A Damn Vulnerable AWS Infrastructure

Loki - Simple IOC and YARA Scanner

Ziti SDK for Python

S3 Account Search

Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark