appsecco Goto Github PK

alldaydevops-aism

All Day DevOps - Automated Infrastructure Security Monitoring and Defence (ELK + AWS Lambda)

alldaydevops-shua

This repository contains all the talk materials and ebook from the talk System Hardening Using Ansible given at All Day DevOps 2016 online conference

anchore-engine

A service that analyzes docker images and applies user-defined acceptance policies to allow automated container image validation and certification

ansible-module-owasp-zap

Ansible module for OWASP ZAP using Python API to scan web targets for security issues

asn-search-api

A Golang API over MaxMind ASN database

attacking-cloudgoat2

A step-by-step walkthrough of CloudGoat 2.0 scenarios.

automated-defence-ssh-bruteforce-aws

Source code for Automated Defence - Blocking SSH bruteforce attacks in AWS

awesome-scalability

:bookmark: Daily-updated reading list for designing High Scalability :cherries:, High Availability :fire:, High Stability :mount_fuji: back-end systems - Pull requests are greatly welcome :two_men_holding_hands: I hope you will find this project helpful :four_leaf_clover: Please help me share it to more and more people :heart: Thank you - 谢谢 - धन्यवाद - ধন্যবাদ - Спасибо - شكرا - Merci - Gracias - Danke - ありがとう - Cảm ơn! :bow:

breaking-and-pwning-apps-and-servers-aws-azure-training

Course content, lab setup instructions and documentation of our very popular Breaking and Pwning Apps and Servers on AWS and Azure hands on training!

bsides-delhi-recon

This repository contains all the material from the talk "Doing recon like it's 2017" given at Bsides Delhi 2017 conference

bugcrowd-levelup-subdomain-enumeration

This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtual conference

c0c0n-2019-ctf-writeups

CTF write-ups from c0c0n 2019 CTF challenges that we participated

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

container-image-scanner-api

A minimalist Go API to scan Docker images for security vulnerabilities and weaknesses

datasploit-ansible

Ansible Playbook for setting up Datasploit

defcon-26-workshop-attacking-and-auditing-docker-containers

DEF CON 26 Workshop - Attacking & Auditing Docker Containers Using Open Source

defcon24-infra-monitoring-workshop

Defcon24 Workshop Contents : Ninja Level Infrastructure Monitoring

devopssecuritychecklist

devsecops-using-cloudnative-workshop

This repo contains workshop material delivered at #nullcon2020

django-rev-shell

A simple django app to provide a reverse shell when deployed and invoked.

docker-data-science-toolbox

Data Science Command Line Toolbox in a docker container

docker-datasploit

Docker container for datasploit framework

dvcsharp-api

Damn Vulnerable C# Application (API)

dvja

Damn Vulnerable Java (EE) Application

dvna

Damn Vulnerable NodeJS Application

http-basics-docker

j2m

[UNMAINTAINED] Convert from JIRA text formatting to GitHub Flavored MarkDown and back again

json-flash-csrf-poc

This repo contains the files required to perform a CSRF attack using Flash and HTTP 307 redirections.

kccss

Kubernetes Common Configuration Scoring System

kube-scan

kube-scan: Octarine k8s cluster risk assessment tool