aws / http-desync-guardianLinks
Analyze HTTP requests to minimize risks of HTTP Desync attacks (precursor for HTTP request smuggling/splitting).
☆265Updated 4 years ago
Alternatives and similar repositories for http-desync-guardian
Users that are interested in http-desync-guardian are comparing it to the libraries listed below
Sorting:
- A command line interface for Amazon EBS snapshots☆232Updated last week
- DEPRECATED - web security checklist for Firefox Services☆75Updated 4 years ago
- Rust libraries and tools for using and generating TUF repositories☆212Updated last week
- k8s audit repo☆229Updated 5 years ago
- AWS Metadata Proxy for protection against SSRF☆68Updated 5 years ago
- Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 (IMDSv2).☆143Updated 2 months ago
- A production-friendly malware scanner for your AWS cloud☆199Updated 4 years ago
- No need for IAM users when we have Yubikeys☆158Updated 3 years ago
- Resource types that can be publicly exposed on AWS☆327Updated 3 years ago
- 'Continuous' AWS perimeter monitoring: Periodically scan internet facing AWS resources to detect misconfigured services.☆64Updated 5 years ago
- ☆138Updated 4 months ago
- OWASP ServerlessGoat: a serverless application demonstrating common serverless security flaws☆326Updated 11 months ago
- Security testing tool for Kubernetes, abusing kubelet credentials on public cloud providers.☆161Updated last year
- Security aspects of AWS products for the Security Specialist certification☆211Updated 3 years ago
- Example detection of compromise credentials in AWS☆122Updated 6 years ago
- for AWS Security material☆248Updated 3 years ago
- ☆218Updated last month
- Dow Jones Hammer : Protect the cloud with the power of the cloud(AWS)☆442Updated 2 years ago
- Automatically compile an AWS Service Control Policy that ONLY allows AWS services that are compliant with your preferred compliance frame…☆225Updated last year
- AWS Inventory and Compliance Framework☆224Updated 2 years ago
- Hallow is a SSH Certificate Authority designed for use with AWS native environments☆65Updated last year
- A crowdsourced AWS IAM permissions reference.☆97Updated last week
- Research on the enumeration of IAM permissions without logging to CloudTrail☆61Updated 4 years ago
- ☆83Updated 5 years ago
- List of vendors that do not allow IMDSv2 enforcement☆143Updated last year
- AWS Red Team Orchestration Framework☆102Updated 7 years ago
- Aardvark is a multi-account AWS IAM Access Advisor API☆479Updated 8 months ago
- A documentation and tracking project with the goal of making package management systems more secure.☆50Updated 4 years ago
- IAM-Deescalate helps mitigate privilege escalation risk in AWS identity and access management (IAM)☆98Updated 2 years ago
- ☆156Updated 2 years ago