Build security program documentation using Git and Markdown
☆32Jul 10, 2026Updated 3 months ago
Alternatives and similar repositories for graphgrc
Users that are interested in graphgrc are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A repository containing OSCAL serializations of the CIS Critical Security Controls☆62Mar 20, 2025Updated last year
- AIBOM Workshop RSA 2024☆15May 20, 2024Updated 2 years ago
- An open source Governance Risk Compliance (GRC) solution for corporates and government☆39Jul 10, 2017Updated 9 years ago
- OWASP Foundation Web Respository☆93Oct 21, 2026Updated last week
- Continuous Audit Metrics☆28Jun 5, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆12Sep 9, 2026Updated last month
- ☆15Oct 6, 2024Updated 2 years ago
- SANS has developed a set of information security policy templates. These are free to use and fully customizable to your company's IT secu…☆66Oct 22, 2021Updated 5 years ago
- collection of materials and resources I use to teach computer security classes☆12Jun 25, 2021Updated 5 years ago
- A Secure Controls Framework (SCF) Power BI App☆28Nov 3, 2024Updated last year
- An implementation of A2A agents and aauth with keycloak☆15May 20, 2026Updated 5 months ago
- Open source cyber-serenity platform that help the security teams designing and managing companies' ISMS, and which allow them to create r…☆20Updated this week
- Open-source GRC platform for modern security teams. Manage compliance (SOC 2, ISO 27001, HIPAA), risk registers, vendor assessments, and …☆165Updated this week
- A local daemon-backed AWS temporary credential broker, exposed over a Unix socket and controlled via CLI.☆22Updated this week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Attaché provides an emulation layer for Cloud Provider IMDS APIs☆59Updated this week
- Extracting clear-text HTTP credentials from a POST request in a captured network stream using Wireshark filters and TCP stream analysis.☆11Dec 19, 2025Updated 10 months ago
- Z-Wave Packet Interception & Injection Tool (Reloaded 2025 - Python 3, S2 Support and with a modern GUI powered by Dear ImGUI)☆14Oct 18, 2025Updated last year
- Malware Analysis · PowerShell Keylogger · Tor C2 — Concise walkthrough dissecting a SOCKS5-proxied keylogger, its keylogging APIs, exfilt…☆11Nov 26, 2025Updated 11 months ago
- Archive of the Information Secuity policy documentation for Greater Manchester CHC that conforms to ISO27001☆14Apr 19, 2020Updated 6 years ago
- Tool to query the RIPE database☆11Jun 2, 2025Updated last year
- CVE-2025-59287 — Critical unauthenticated RCE in Windows Server Update Services (WSUS) via unsafe deserialization of an AuthorizationCook…☆10Oct 28, 2025Updated last year
- AdityaBhatt3010 / SQL-injection-UNION-attack-determining-the-number-of-columns-returned-by-the-queryUNION-based SQLi to identify the exact number of columns returned by the application’s SQL query.☆10Nov 22, 2025Updated 11 months ago
- A clean Oracle-based UNION SQLi walkthrough where I enumerate tables, extract user credentials, and log in as administrator to solve the …☆10Nov 15, 2025Updated 11 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- AdityaBhatt3010 / SQL-injection-attack-querying-the-database-type-and-version-on-MySQL-and-MicrosoftA simple UNION-based SQL injection exploiting the category filter to enumerate column count and extract the backend database version usin…☆10Nov 15, 2025Updated 11 months ago
- DOM XSS in jQuery anchor href attribute sink using location.search source☆10Dec 12, 2025Updated 10 months ago
- Simple reflected XSS vulnerability where unencoded HTML context allows direct JavaScript execution via a <script> payload.☆11Nov 15, 2025Updated 11 months ago
- Stored XSS occurs when malicious input is saved on the server and executed every time a user loads the affected page.☆10Nov 15, 2025Updated 11 months ago
- UNION-based SQL injection used to enumerate database tables, extract credential columns, dump usernames and passwords, and log in as the …☆10Nov 15, 2025Updated 11 months ago
- Blind SQL injection exploiting Welcome back responses to extract the administrator’s password using boolean conditions and substring-base…☆10Nov 15, 2025Updated 11 months ago
- DOM-based XSS where location.search is written into the page via innerHTML, letting us inject HTML and trigger alert(1) using an SVG onlo…☆11Dec 4, 2025Updated 10 months ago
- Breaking down CVE-2025-54253 — an Adobe AEM-Forms exploit path from XXE to full remote code execution and its real-world impact.☆10Nov 4, 2025Updated 11 months ago
- A deep dive into the OWASP Top 10: 2025 update — exploring how the focus shifts from fixing vulnerabilities to addressing design flaws, s…☆10Nov 8, 2025Updated 11 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- UNION-based SQLi to enumerate tables, dump usernames/passwords from the users table, and log in as the administrator.☆10Nov 17, 2025Updated 11 months ago
- UNION-based SQLi PoC where we enumerate tables, extract usernames and passwords from the users table using string concatenation, and log …☆11Nov 25, 2025Updated 11 months ago
- Questions to ask about the team and company when you're interviewing for a CISO position☆15Oct 19, 2021Updated 5 years ago
- Agent-portable Compliance Trestle and OSCAL engineering toolkit: convert legacy SSPs to OSCAL, validate with Trestle and oscal-cli, FedRA…☆17Aug 4, 2026Updated 2 months ago
- AWS CloudFormation template to automate a more secure deployment of the OpenVPN Access Server Community Edition.☆21Feb 9, 2018Updated 8 years ago
- DOM-based XSS flaw where location.search is injected into the page via innerHTML, letting us execute arbitrary JavaScript.☆11Dec 12, 2025Updated 10 months ago
- Official code for the paper entitled "Toward Intelligent and Secure Cloud: Large Language Model Empowered Proactive Defense"☆17Apr 10, 2025Updated last year