dagheyman / awesome-product-security
📚A curated list of product security resources.
☆18Updated 2 years ago
Related projects ⓘ
Alternatives and complementary repositories for awesome-product-security
- A vulnerable environment for exploring common GCP misconfigurations and vulnerabilities☆25Updated 4 months ago
- GCP GOAT is the vulnerable application for learn the GCP Security☆62Updated last year
- HazProne is a Cloud Pentesting Framework that emulates close to Real-World Scenarios by deploying Vulnerable-By-Demand AWS resources enab…☆39Updated 2 years ago
- ☆22Updated 3 years ago
- Blogpost series showcasing interesting cloud - web app security bugs☆46Updated last year
- Regex patterns for manual application source code review☆25Updated 3 years ago
- ☆22Updated 4 years ago
- Scripts and misc. stuff related to the PortSwigger Web Academy☆17Updated 2 years ago
- ☆16Updated last year
- This repository hosts several snippets and file related to the BsidesLV 2024 talk about Shadow and Zombie APIs by me☆17Updated 3 months ago
- InfoSec OpenAI Examples☆19Updated 11 months ago
- Checks whether a domain is hosted on a cloud service such as AWS, Azure or CloudFlare☆58Updated last year
- Run Capture the Flags and Security Trainings with OWASP WrongSecrets☆43Updated this week
- Virtual Security Operations Center☆49Updated last year
- This GitHub Action sends a reverse shell from a runner via Azure Storage Account blobs☆36Updated last month
- This is vulnerable microservice written in many language to demonstrating OWASP API Top Security Risk (under development)☆42Updated last year
- ☆12Updated 2 years ago
- Tracking my journey towards earning my OSCP. This includes the process of everything that I learn along the way.☆47Updated 2 years ago
- ☆29Updated 3 years ago
- Additional active scan checks for BURP☆20Updated last month
- Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.☆39Updated 11 months ago
- ☆31Updated last week
- A not-curated list of cloud hacking labs☆19Updated 7 months ago
- ☆55Updated last year
- moniorg is a tool that leverages crt.sh website to monitor domains of a target☆47Updated last year
- Collection of Docker honeypot logs from 2021 - 2024☆35Updated last month
- ☆36Updated last year
- This repository provides examples of Vulnerable and Mitigated code as per CWE Categorization.☆20Updated 6 months ago
- Resources to learn cloud environment and pentesting the same, contains AWS, Azure, Google Cloud☆50Updated 2 years ago