dagheyman / awesome-product-security
📚A curated list of product security resources.
☆19Updated 2 years ago
Alternatives and similar repositories for awesome-product-security:
Users that are interested in awesome-product-security are comparing it to the libraries listed below
- HazProne is a Cloud Pentesting Framework that emulates close to Real-World Scenarios by deploying Vulnerable-By-Demand AWS resources enab…☆39Updated 2 years ago
- ☆56Updated 2 years ago
- Scripts and misc. stuff related to the PortSwigger Web Academy☆17Updated 3 years ago
- GCP GOAT is the vulnerable application for learn the GCP Security☆64Updated last year
- ☆35Updated last month
- A not-curated list of cloud hacking labs☆25Updated last year
- A vulnerable environment for exploring common GCP misconfigurations and vulnerabilities☆27Updated last month
- Regex patterns for manual application source code review☆27Updated 4 years ago
- Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.☆40Updated last year
- Virtual Security Operations Center☆50Updated last year
- This repository hosts several snippets and file related to the BsidesLV 2024 talk about Shadow and Zombie APIs by me☆18Updated 8 months ago
- Blogpost series showcasing interesting cloud - web app security bugs☆47Updated last year
- Manage attack surface data on Elasticsearch☆22Updated last year
- Checks whether a domain is hosted on a cloud service such as AWS, Azure or CloudFlare☆59Updated 2 years ago
- This repository is intended for sharing files/tools/tutorials..etc that related to eWPTXv2 from eLearnSecurity☆14Updated 4 years ago
- ☆22Updated 3 years ago
- This is vulnerable microservice written in many language to demonstrating OWASP API Top Security Risk (under development)☆43Updated 2 years ago
- yataf extracts secrets and paths from files or urls - its best used against javascript files☆52Updated 7 months ago
- ☆24Updated 6 years ago
- A tool for secrets management, encryption as a service, and privileged access management☆14Updated last month
- ☆37Updated last year
- A multi-cloud DNS record scanner that aims to help cybersecurity/IT analysts identify dangling CNAME records in their cloud DNS services …☆49Updated 2 years ago
- Damn Vulnerable Rails app☆12Updated 12 years ago
- ☆20Updated 2 years ago
- Run Capture the Flags and Security Trainings with OWASP WrongSecrets☆45Updated this week
- Enumerate AWS permissions and resources.☆68Updated 2 years ago
- ☆21Updated 7 years ago
- moniorg is a tool that leverages crt.sh website to monitor domains of a target☆47Updated 2 years ago
- A web security research tool for DOM testing☆20Updated this week
- ☆12Updated 3 years ago