Alternatives and similar repositories for EnterpriseSASTDASTProductLandscape

Users that are interested in EnterpriseSASTDASTProductLandscape are comparing it to the libraries listed below

• HarshVaragiya / aws-redteam-kit
  A PoC to Simulate Ransomware Attack on AWS Environment
  ☆32Updated last year
• antitree / vault-backdoored
  A tool for secrets management, encryption as a service, and privileged access management
  ☆13Updated 6 months ago
• referefref / aiocrioc
  An LLM and OCR based Indicator of Compromise Extraction Tool
  ☆38Updated last year
• doyensec / cloudsec-tidbits
  Blogpost series showcasing interesting cloud - web app security bugs
  ☆49Updated 2 years ago
• bilals12 / clusterfuck
  ☆42Updated 2 months ago
• AppOmni-Labs / event-maturity-matrix
  The Event Maturity Matrix (EMM) is a comprehensive framework that provides clarity regarding the capabilities and nuances of SaaS audit l…
  ☆30Updated 7 months ago
• silascutler / dockerhoneypot-logs
  Collection of Docker honeypot logs from 2021 - 2024
  ☆36Updated last year
• chryzsh / cloud-hacking-labs
  A not-curated list of cloud hacking labs
  ☆26Updated last year
• RichardoC / gitlab-secrets
  This tool analyzes a given Gitlab repository and searches for dangling or force-pushed commits containing potential secret or interesting…
  ☆47Updated last year
• hac01 / gcp-iam-brute
  ☆51Updated last year
• naorhaziz / ecscape
  PoC for CVE-Requested vulnerability in Amazon ECS (EC2 launch type) allowing cross-task IAM credential theft.
  ☆46Updated 5 months ago
• nccgroup / cq
  ☆116Updated 2 years ago
• stephenbradshaw / aws_url_signer
  POC tool to create signed AWS API GET requests to bypass Guard Duty alerting of off-instance credential use via SSRF
  ☆59Updated 2 years ago
• nodyhub / zipslipper
  Create tar/zip archives that try to exploit zipslip vulnerability.
  ☆48Updated last year
• Escape-Technologies / API-Threat-Matrix
  A comprehensive knowledge base for security professionals to keep track of and build defenses against API attack techniques.
  ☆44Updated last year
• DataDog / whoAMI-scanner
  Scan your account for the use of untrusted AMIs
  ☆31Updated 2 months ago
• Permiso-io-tools / RansomWhen
  RansomWhen is a tool to enumerate identities that can lock S3 Buckets using KMS, resulting in ransomwares, as well as detect occurances o…
  ☆60Updated last year
• ayushpriya10 / IMDShift
  ☆55Updated 2 years ago
• markkcc / crxaminer
  Examine Chrome extensions for security issues
  ☆93Updated 2 months ago
• doyensec / PoiEx
  🌐 Visualize and explore IaC ✒️ Create and share notes in VS Code 🤝 Sync notes and findings in real-time with friends
  ☆73Updated 2 years ago
• tenable / hidden-services-revealer
  ☆39Updated last year
• tstromberg / supplychain-attack-data
  Data about all known supply-chain attacks through history
  ☆63Updated 8 months ago
• BishopFox / llm-testing-findings
  LLM Testing Findings Templates
  ☆75Updated last year
• 5stars217 / malicious_models
  using ML models for red teaming
  ☆45Updated 2 years ago
• n0jam / gcp-ctf-workshop
  ☆41Updated last year
• trufflesecurity / WhoAmISlack
  Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.
  ☆42Updated 2 years ago
• nccgroup / ccs
  ☆114Updated 2 years ago
• ManuelBerrueta / urlyzer
  urlyzer is a URL parsing analysis tool.
  ☆24Updated last year
• fkie-cad / bountyhunter
  A Caldera plugin for the emulation of complete, realistic cyberattack chains.
  ☆61Updated 2 months ago
• AbstractClass / CloudPrivs
  Determine privileges from cloud credentials via brute-force testing.
  ☆68Updated last year