ik-security Goto Github PK

anchore

Legacy Anchore container analysis, inspection and control toolset. See https://github.com/anchore/anchore-engine for newer version that operates as a service with REST API instead of a cli tool.

apisecuritybestpractices

Resources to help you keep secrets (API keys, database credentials, certificates, ...) out of source code and remediate the issue in case of a leaked API key. Made available by GitGuardian.

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

awesome-waf

🔥 Everything awesome about web-application firewalls (WAF).

aws-config-engine-for-compliance-as-code

Manage AWS Config Rules at scale in AWS multi-account and/or multi-region environment; with fully configurable deployment (RuleSets) and analytics.

aws-config-rules

[Node, Python, Java] Repository of sample Custom Rules for AWS Config.

aws-inventory

Discover resources created in an AWS account.

aws-securityhub-to-slack

Demonstrates sending AWS findings to your Slack Channel

aws-waf-security-automations

This solution automatically deploys a single web access control list (web ACL) with a set of AWS WAF rules designed to filter common web-based attacks.

bane

Custom & better AppArmor profile generator for Docker containers.

bats-support

Supporting library for Bats test helpers

blackbox

Safely store secrets in Git/Mercurial/Subversion

blueprint-securesoftwarepipeline

For engineers and security teams driving fast and secure software supply chains

bucketlist

Amazon S3 bucket spelunking!

c7n-policies

Cloud Custodian Policies for Automated Amazon Resource Management

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

clair

Vulnerability Static Analysis for Containers

cloud-c7n-policy-examples

A repository of example cloud custodian policies.

cloud-reports

Scans your AWS cloud resources and generates reports. Check out free hosted version:

cloudcustodian-policies

Cloud Custodian policy that logs unused security groups

cloudgoat

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

cloudsploit-terraform-scans

Terraform modules for CloudSploit Scanner

confd

Manage local application configuration files using templates and data from etcd or consul

dast-operator

Dynamic Application and API Security Testing

decker

Declarative penetration testing orchestration framework

devopssecuritychecklist

electriceye

Continuously monitor your AWS services for configurations that can lead to degradation of confidentiality, integrity or availability. All results will be sent to Security Hub for further aggregation and analysis.

falco

Falco: Container Native Runtime Security

faraday

Collaborative Penetration Test and Vulnerability Management Platform

fdsploit

File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.