Alternatives and similar repositories for EnterpriseSASTDASTProductLandscape

Users that are interested in EnterpriseSASTDASTProductLandscape are comparing it to the libraries listed below

• HarshVaragiya / aws-redteam-kit
  A PoC to Simulate Ransomware Attack on AWS Environment
  ☆32Updated 11 months ago
• doyensec / cloudsec-tidbits
  Blogpost series showcasing interesting cloud - web app security bugs
  ☆49Updated 2 years ago
• bilals12 / clusterfuck
  ☆35Updated 5 months ago
• antitree / vault-backdoored
  A tool for secrets management, encryption as a service, and privileged access management
  ☆14Updated 2 months ago
• Escape-Technologies / API-Threat-Matrix
  A comprehensive knowledge base for security professionals to keep track of and build defenses against API attack techniques.
  ☆43Updated last year
• AbstractClass / CloudPrivs
  Determine privileges from cloud credentials via brute-force testing.
  ☆69Updated last year
• tenable / hidden-services-revealer
  ☆39Updated last year
• stephenbradshaw / aws_url_signer
  POC tool to create signed AWS API GET requests to bypass Guard Duty alerting of off-instance credential use via SSRF
  ☆58Updated 2 years ago
• hac01 / gcp-iam-brute
  ☆50Updated last year
• ayushpriya10 / IMDShift
  ☆55Updated 2 years ago
• RichardoC / gitlab-secrets
  This tool analyzes a given Gitlab repository and searches for dangling or force-pushed commits containing potential secret or interesting…
  ☆47Updated last year
• referefref / aiocrioc
  An LLM and OCR based Indicator of Compromise Extraction Tool
  ☆35Updated 10 months ago
• AppOmni-Labs / event-maturity-matrix
  The Event Maturity Matrix (EMM) is a comprehensive framework that provides clarity regarding the capabilities and nuances of SaaS audit l…
  ☆28Updated 3 months ago
• nccgroup / cq
  ☆116Updated 2 years ago
• BreakingMhet / honeyzure
  HoneyZure is a honeypot tool specifically designed for Azure environments, fully provisioned through Terraform. It leverages a Log Analyt…
  ☆16Updated last year
• Antonlovesdnb / DockerDetectionNotes
  Some of my rough notes for Docker threat detection
  ☆47Updated 2 years ago
• bcdannyboy / DGWR
  Dont Gamble with Risk
  ☆14Updated last year
• trufflesecurity / WhoAmISlack
  Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.
  ☆42Updated last year
• google / facade
  ☆128Updated 2 months ago
• DuneGroup / ice-axe
  ☆23Updated last year
• tstromberg / supplychain-attack-data
  Data about all known supply-chain attacks through history
  ☆60Updated 4 months ago
• sebastian-mora / awsssome_phish
  AWS SSO serverless phishing API.
  ☆32Updated 4 years ago
• DataDog / whoAMI-scanner
  Scan your account for the use of untrusted AMIs
  ☆29Updated last month
• markkcc / crxaminer
  Examine Chrome extensions for security issues
  ☆85Updated 2 months ago
• nodyhub / zipslipper
  Create tar/zip archives that try to exploit zipslip vulnerability.
  ☆48Updated last year
• nccgroup / ccs
  ☆113Updated 2 years ago
• messypoutine / gravy-overflow
  A GitHub Actions Supply Chain CTF / Goat
  ☆24Updated last week
• chryzsh / cloud-hacking-labs
  A not-curated list of cloud hacking labs
  ☆27Updated last year
• kerberosmansour / InfoSecOpenAIExamples
  InfoSec OpenAI Examples
  ☆19Updated last year
• stafordtituss / HazProne
  HazProne is a Cloud Pentesting Framework that emulates close to Real-World Scenarios by deploying Vulnerable-By-Demand AWS resources enab…
  ☆40Updated 3 years ago