Alternatives and similar repositories for EnterpriseSASTDASTProductLandscape

Users that are interested in EnterpriseSASTDASTProductLandscape are comparing it to the libraries listed below

• HarshVaragiya / aws-redteam-kit
  A PoC to Simulate Ransomware Attack on AWS Environment
  ☆32Updated last year
• AppOmni-Labs / event-maturity-matrix
  The Event Maturity Matrix (EMM) is a comprehensive framework that provides clarity regarding the capabilities and nuances of SaaS audit l…
  ☆28Updated 4 months ago
• BreakingMhet / honeyzure
  HoneyZure is a honeypot tool specifically designed for Azure environments, fully provisioned through Terraform. It leverages a Log Analyt…
  ☆16Updated last year
• chryzsh / cloud-hacking-labs
  A not-curated list of cloud hacking labs
  ☆27Updated last year
• referefref / aiocrioc
  An LLM and OCR based Indicator of Compromise Extraction Tool
  ☆36Updated 10 months ago
• bilals12 / clusterfuck
  ☆35Updated 2 weeks ago
• nodyhub / zipslipper
  Create tar/zip archives that try to exploit zipslip vulnerability.
  ☆48Updated last year
• markkcc / crxaminer
  Examine Chrome extensions for security issues
  ☆85Updated 2 months ago
• stephenbradshaw / aws_url_signer
  POC tool to create signed AWS API GET requests to bypass Guard Duty alerting of off-instance credential use via SSRF
  ☆58Updated 2 years ago
• Retrospected / PurpleKeep
  Providing Azure pipelines to create an infrastructure and run Atomic tests.
  ☆53Updated 2 years ago
• bcdannyboy / DGWR
  Dont Gamble with Risk
  ☆14Updated last year
• RichardoC / gitlab-secrets
  This tool analyzes a given Gitlab repository and searches for dangling or force-pushed commits containing potential secret or interesting…
  ☆47Updated last year
• Adversis / sketchy
  A tool for folks who `git clone` first and ask questions later
  ☆56Updated last month
• stafordtituss / HazProne
  HazProne is a Cloud Pentesting Framework that emulates close to Real-World Scenarios by deploying Vulnerable-By-Demand AWS resources enab…
  ☆40Updated 3 years ago
• doyensec / cloudsec-tidbits
  Blogpost series showcasing interesting cloud - web app security bugs
  ☆50Updated 2 years ago
• Permiso-io-tools / capiche
  ☆18Updated last month
• antitree / vault-backdoored
  A tool for secrets management, encryption as a service, and privileged access management
  ☆14Updated 3 months ago
• hac01 / gcp-iam-brute
  ☆50Updated last year
• fkie-cad / bountyhunter
  A Caldera plugin for the emulation of complete, realistic cyberattack chains.
  ☆58Updated 2 months ago
• nccgroup / cq
  ☆116Updated 2 years ago
• google / facade
  ☆129Updated 2 months ago
• carlospolop / bf-aws-perms-simulate
  ☆18Updated last year
• trufflesecurity / WhoAmISlack
  Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.
  ☆42Updated last year
• Antonlovesdnb / DockerDetectionNotes
  Some of my rough notes for Docker threat detection
  ☆48Updated 2 years ago
• DataDog / whoAMI-scanner
  Scan your account for the use of untrusted AMIs
  ☆30Updated 2 months ago
• silascutler / dockerhoneypot-logs
  Collection of Docker honeypot logs from 2021 - 2024
  ☆36Updated last year
• Escape-Technologies / API-Threat-Matrix
  A comprehensive knowledge base for security professionals to keep track of and build defenses against API attack techniques.
  ☆43Updated last year
• cedowens / Helpful_aws-scripts
  python3 scripts to help with aws triage needs
  ☆15Updated 3 years ago
• invictus-ir / IOCs
  Invictus Threat Intelligence: IOCs and TTPs from blogs, research and more
  ☆29Updated 3 weeks ago
• ghostsecurityarchive / waf-btk
  WAF bypass PoC
  ☆49Updated 2 years ago