flaviod Goto Github PK

awesome-appsec

A curated list of resources for learning about application security

awesome-ml-for-cybersecurity

:octocat: Machine Learning for Cyber Security

aws-lambda-security-controls

This is a collection of AWS CloudFormation templates which create Lambda functions triggered by CloudWatch Events rule to evaluate AWS API calls to trigger Amazon Simple Notification Service (Amazon SNS) for notifications.

aws-log-tools

Tools for dealing with AWS logs like CloudFront

aws-security-automation

Collection of scripts and resources for DevSecOps and Automated Incident Response Security

aws-serverless-security-workshop

In this workshop, you will learn techniques to secure a serverless application built with AWS Lambda, Amazon API Gateway and RDS Aurora. We will cover AWS services and features you can leverage to improve the security of a serverless applications in 5 domains: identity & access management, code, data, infrastructure, logging & monitoring.

certificate-cookbook

A Chef cookbook for creating SSL certificate files stored in a databag

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

chef-cookbook-ssl

Deploy a Chef-managed Certificate Authority

chef-cookbook-ssl-key-vault

Chef cookbook to manage SSL keys

chef-repo

Leaning Chef exercises

chef-ssl-certificates

SSL certificates cookbook for Chef

cloud-custodian

Policy rules engine for aws management, policies in yaml for query, filter, and take actions on resources

cookbook-ssl-certificate

This cookbook provides the setup recipes, helper methods and attributes that describe a PKI certificate deployment for the world.

django-realworld-example-app

docker-compose-ha-consul-vault-ui

A docker-compose example of HA Consul + Vault + Vault UI

elastalert

Easy & Flexible Alerting With ElasticSearch

geth-elk

:ferris_wheel: Geth + Elastic

hashi-helper

Disaster Recovery and Configuration Management for Consul and Vault

hookpick

A tool to manage some operational concepts of Hashicorp Vault

inspec

InSpec: Auditing and Testing Framework

kube-bench

The Kubernetes Bench for Security is a Go application that checks whether Kubernetes is deployed according to security best practices

kube-hunter

Hunt for security weaknesses in Kubernetes clusters

oneops

Main repository for collecting issues and backlog related to the product.

owasp-jenkins

Want to test your applications using the latest OWASP security toolchains and the NIST National Vulnerability Database using Jenkins, Ansible and docker? :whale: :shield: :lock:

privacyidea

authentication system for two factor authentication (2FA, OTP)

prowler

AWS Security Best Practices Assessment, Auditing, Hardening and Forensics Readiness Tool. It follows guidelines of the CIS Amazon Web Services Foundations Benchmark and DOZENS of additional checks including GDPR and HIPAA (+90). Official CIS for AWS guide: https://d0.awsstatic.com/whitepapers/compliance/AWS_CIS_Foundations_Benchmark.pdf

pytomation

Python Home Automation

quickstart-compliance-cis-benchmark

AWS Quick Start Team

ssl-cookbook

Chef cookbook for setting up SSL certs and keys on Debian and Ubuntu systems