The Mall Cop's Projects
Web Application Security Scanner Framework
Open Source Vulnerability Assessment and Management helps developers and pentesters to perform scans and manage vulnerabilities.
ARX is a comprehensive open source data anonymization tool aiming to provide scalability and usability. It supports various anonymization techniques, methods for analyzing data quality and re-identification risks and it supports well-known privacy models, such as k-anonymity, l-diversity, t-closeness and differential privacy.
Security Mindmap that could be useful for the infosec community when doing pentest, bug bounty or red-team assessments.
Vulnerability consolidation and management tool, enhances scan results by merging different findings of the same weakness across multiple static/dynamic scans
Automated Security Testing For REST API's
The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters
An authoritative list of awesome devsecops tools with the help from community experiments and contributions.
A curated list of awesome YARA rules, tools, and people.
The currently released SimpleRisk source code.
ISO 27001 | Controles
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
LKM rootkit for Linux Kernels 2.6.x/3.x/4.x
Docker container for OSSEC HIDS manager
OSSEC integrated with ELK Stack container
Drakkr is a open framework for an open source governance
ECOS repository - Project for Evaluating the Cost of Open SOurce adoption
The ESPM is: The mapping of security controls The measurement of operational activities The metrics aggregated into a risk-based, executive management perspective.
⚖Open Source Toolkit for Quantitative Risk Assessment
Collaborative Penetration Test and Vulnerability Management Platform
A browser extension for faradaysec platform https://faradaysec.com
Clone this repo to build Frida
A GDPR Data Protection Impact Assessment (DPIA) tool to assist organisations to evaluate data protection risks with respect to the EU's General Data Protection Regulation.
General Open Architecture Security Questionnaire
An open source Governance Risk Compliance (GRC) solution for corporates and government
GRR Rapid Response: remote live forensics for incident response
HPE Security Questionnaire