Alternatives and similar repositories for www-project-devsecops-verification-standard:

Users that are interested in www-project-devsecops-verification-standard are comparing it to the libraries listed below

• JOSHUAJEBARAJ / GCP-GOAT
  GCP GOAT is the vulnerable application for learn the GCP Security
  ☆63Updated last year
• 0xd4y / AWSealion
  A tool to keep AWS pentests and red teams efficient, organized, and stealthy.
  ☆90Updated 10 months ago
• vectra-ai-research / derf
  DeRF (Detection Replay Framework) is an "Attacks As A Service" framework, allowing the emulation of offensive techniques and generation o…
  ☆88Updated last year
• doyensec / cloudsec-tidbits
  Blogpost series showcasing interesting cloud - web app security bugs
  ☆47Updated last year
• WithSecureLabs / cloud-wiki
  A public cloud security knowledgebase - https://www.secwiki.cloud/
  ☆51Updated 2 months ago
• padok-team / cognito-scanner
  A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
  ☆101Updated 11 months ago
• cloudnative-security / hacking-kubernetes
  ☆43Updated 3 years ago
• carlospolop / aws_iam_review
  ☆32Updated 3 weeks ago
• saw-your-packet / CloudShovel
  A tool for scanning public or private AMIs for sensitive files and secrets. The tool follows the research made on AWS CloudQuarry where w…
  ☆97Updated 2 months ago
• stephenbradshaw / aws_url_signer
  POC tool to create signed AWS API GET requests to bypass Guard Duty alerting of off-instance credential use via SSRF
  ☆58Updated last year
• domain-protect / domain-protect-gcp
  Protect against subdomain takeover
  ☆93Updated 7 months ago
• vengatesh-nagarajan / Cloud-pentest
  Resources to learn cloud environment and pentesting the same, contains AWS, Azure, Google Cloud
  ☆50Updated 2 years ago
• ghostsecurity / waf-btk
  WAF bypass PoC
  ☆45Updated last year
• nccgroup / ccs
  ☆110Updated last year
• WithSecureLabs / IceKube
  ☆171Updated last month
• bvoris / mitreattackthreatmodeling
  This provides a guided step by step walkthrough for threat modeling with MITRE ATT&CK Framework
  ☆27Updated last year
• latiotech / insecure-kubernetes-deployments
  A full insecure kubernetes application for testing security tools
  ☆64Updated last week
• lacioffi / GCP-pentest-lab
  A vulnerable environment for exploring common GCP misconfigurations and vulnerabilities
  ☆26Updated 6 months ago
• WithSecureLabs / cloud-security-vm
  Ansible/Vagrant/Packer files to create a virtual machine with the tooling needed to perform cloud security assessments
  ☆132Updated 2 weeks ago
• piercing-index / cloud-vulnerabilities
  ☆38Updated 8 months ago
• offensive-actions / azure-storage-reverse-shell
  This GitHub Action sends a reverse shell from a runner via Azure Storage Account blobs
  ☆36Updated 3 months ago
• CloudDefenseAI / falco_extended_rules
  Curating Falco rules with MITRE ATT&CK Matrix
  ☆77Updated 10 months ago
• xvnpw / ai-security-analyzer
  A powerful tool that leverages AI to automatically generate comprehensive security documentation for your projects
  ☆21Updated this week
• Rezonate-io / github-oidc-checker
  Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts
  ☆60Updated last year
• boostsecurityio / lotp
  boostsecurityio/lotp
  ☆110Updated last month
• SirAppSec / bsides-shadow-api
  This repository hosts several snippets and file related to the BsidesLV 2024 talk about Shadow and Zombie APIs by me
  ☆17Updated 5 months ago
• righettod / log4shell-analysis
  Contains all my research and content produced regarding the log4shell vulnerability
  ☆31Updated 2 years ago
• BishopFox / llm-testing-findings
  LLM Testing Findings Templates
  ☆66Updated 11 months ago
• OWASP / www-project-devsecops-guideline
  The OWASP DevSecOps Guideline explains how we can implement a secure pipeline and use best practices and introduce tools that we can use …
  ☆62Updated 7 months ago
• trufflesecurity / WhoAmISlack
  Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.
  ☆39Updated last year