mscdevopssecurity Goto Github PK

auto-pentest-lab

Easily deploy a multi-tiered pentest lab to AWS using Terraform and Ansible

aws-container-image-scan-with-snyk

Two stage pipeline with container image scans in CI stage using Snyk in AWS CodeBuild. Pipeline state and Snyk vulnerability notifications sent to Slack channel.

aws-devsecops-workshop

A continuous security pipeline demo for the AWS DevSecOps Workshop.

aws-vulnerable-lambda

An AWS Lambda vulnerable application written in flask.

azurelabs

Laboratory exercises to complete your knowledge in Cybersecurity with Azure

cloud-hackbox

Create custom AMIs with Packer and Ansible to enable rapid provisioning of offensive infrastructure in AWS using Terraform.

cloudgoat

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

damn-vulnerable-docker-container

docker-vulnerable-dvwa

Damn Vulnerable Web Application Docker container

dockercontainerscan

Exercise about publishing docker containers to Azure and also check security with trivy

driftctl-aws-securitygroup-demo

DevSecOps Story: how driftctl helps to detect manual changes on security groups

dummynetproject4sonarcloudaction

This is a repository containing a dummy .NET app to be analyzed by Sonarcloud

hashcat-cheatsheet

Hashcat Cheatsheet for OSCP

kaimonkey

KaiMonkey provides example vulnerable infrastructure to help cloud security, DevSecOps and DevOps teams explore and understand common cloud security threats exposed via infrastructure as code.

kubernetes-goat

Kubernetes Goat 🐐 is a "Vulnerable by Design" Kubernetes Cluster. Designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security 🔐

linenum

Scripted Local Linux Enumeration & Privilege Escalation Checks

linux-privilege-escalation

Tips and Tricks for Linux Priv Escalation

linuxprivchecker

linuxprivchecker.py -- a Linux Privilege Escalation Check Script

log4shell

marshalsec

my-arsenal-of-aws-security-tools

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

nodejs-goof

Super vulnerable todo list application

privilege-escalation

This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.

rapidscan

:new: The Multi-Tool Web Vulnerability Scanner.

reconnoitre

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

serverless-goat

OWASP ServerlessGoat: a serverless application demonstrating common serverless security flaws

sherlock

PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities.

terraform-aws-client-vpn

terraform-aws-ec2-kali-linux

Offensive Terraform module which creates Kali Linux from the AWS marketplace and installs cloud security tools (Pacu, Cloudsplaining, ScoutSuite).

terraform-cloud-demo1

Terraform Cloud Demo1