Stars
Automated Security Response on AWS is an add-on solution that works with AWS Security Hub to provide a ready-to-deploy architecture and a library of automated playbooks. The solution makes it easie…
flAWS.cloud and flAWS2.cloud Interactive tutorial/CTFs to learn common AWS security mistakes.
List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
Awesome free cloud native security learning labs. Includes CTF, self-hosted workshops, guided vulnerability labs, and research labs.
Phishing attack against synced passkeys
Whois for the Cloud: Recon tool for cloud provider attribution. Supports AWS, Azure, Google, Cloudflare, and Digital Ocean.
The Python Risk Identification Tool for generative AI (PyRIT) is an open source framework built to empower security professionals and engineers to proactively identify risks in generative AI systems.
A modern load testing tool, using Go and JavaScript
Code repository for Building Machine Learning Systems with Python Third Edition, by Packt
Source Code for the book Building Machine Learning Systems with Python
Public datasets to help you address various cyber security problems.
A collection of scripts for assessing Microsoft Azure security
PowerShell framework to assess Azure security
The Azure Active Directory Incident Response PowerShell module provides a number of tools, developed by the Azure Active Directory Product Group in conjunction with the Microsoft Detection and Resp…
Guard offers a policy-as-code domain-specific language (DSL) to write rules and validate JSON- and YAML-formatted data such as CloudFormation Templates, K8s configurations, and Terraform JSON plans…
☁️ ⚡ Granular, Actionable Adversary Emulation for the Cloud
A fast, clean, responsive Hugo theme.
Example solutions demonstrating how to implement patterns within the AWS Security Reference Architecture guide using CloudFormation (including Customizations for AWS Control Tower) and Terraform.
Prevents you from committing secrets and credentials into git repositories
Chaos Monkey is a resiliency tool that helps applications tolerate random instance failures.
Compare the various managed cloud services offered by the major public cloud providers in the market.
BOF to steal browser cookies & credentials
Summarize Kubernetes RBAC roles for the specified subjects.
kubeaudit helps you audit your Kubernetes clusters against common security controls
KubeEye aims to find various problems on Kubernetes, such as application misconfiguration, unhealthy cluster components and node problems.