lifer84 Goto Github PK

awesome-aws-security

Curated list of links, references, books videos, tutorials (Free or Paid), Exploit, CTFs, Hacking Practices etc. which are related to AWS Security

aws-config-rules

[Node, Python, Java] Repository of sample Custom Rules for AWS Config.

chaosmonkey

Chaos Monkey is a resiliency tool that helps applications tolerate random instance failures.

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

cloud-custodian

Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources

devsecops-playbook

This is a step-by-step guide to implementing a DevSecOps program for any size organization

dial

DIAL(Did I Alert Lambda?) is a centralised security misconfiguration detection framework which completely runs on AWS Managed services like AWS API Gateway, AWS Event Bridge & AWS Lambda

free_cybersecurity_professional_development_resources

An awesome list of FREE resources for training, conferences, speaking, labs, reading, etc that are free. Originally built during COVID-19 for cybersecurity professionals with downtime can take advantage of to improve their skills and marketability to come out on the other side ready to rock. Now its taken on a life of its own and will persist, COVID be damned.

hmaverickadams-beginner-network-pentesting

katoolin

Automatically install all Kali linux tools

modsecurity

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis. With over 10,000 deployments world-wide, ModSecurity is the most widely deployed WAF in existence.

nettacker

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

owasp-threat-dragon

An open source, online threat modelling tool from OWASP

pacbot

PacBot (Policy as Code Bot)

pentesting-bible

Learn ethical hacking.Learn about reconnaissance,windows/linux hacking,attacking web technologies,and pen testing wireless networks.Resources for learning malware analysis and reverse engineering.

poirot

Alloy for security

practical-ethical-hacking-resources

Compilation of Resources from TCM's Practical Ethical Hacking Udemy Course

prowler

Prowler is a security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains all CIS controls listed here https://d0.awsstatic.com/whitepapers/compliance/AWS_CIS_Foundations_Benchmark.pdf and more than 100 additional checks that help on GDPR, HIPAA and other security requirements.

quickstart-compliance-pci

AWS Quick Start Team

redteam-offensivesecurity

Tools & Interesting Things for RedTeam Ops

sast-scan

Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependencies. CI and Git friendly.

scoutsuite

Multi-Cloud Security Auditing Tool

seasponge

:pineapple: SeaSponge is an accessible threat modelling tool from Mozilla

sec-cvescan

Analyzes an Ubuntu system and checks for unpatched vulnerabilities.

security-presentations

Collection of my presentations on various topics like application security, python, cloud security, DevSecOps and so on...

security-study-plan

Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...

security_engineer_interview_questions

Every Security Engineer Interview Question From Glassdoor.com

security_monkey

Security Monkey monitors AWS, GCP, OpenStack, and GitHub orgs for assets and their changes over time.

solidity-security-blog

Comprehensive list of known attack vectors and common anti-patterns