freedomofpress / threat-modeling
experimental threat modeling tools
☆14Updated 2 years ago
Alternatives and similar repositories for threat-modeling
Users that are interested in threat-modeling are comparing it to the libraries listed below
Sorting:
- A Java library for programmatically calculating OWASP Risk Rating scores☆18Updated 2 years ago
- Policy Pipeline : place an SDLC around your compliance documentation with a pipeline that renders policy-as-code to human friendly format…☆11Updated 4 years ago
- A catalog designed for environments with multiple or diffuse Information Security vulnerability-related information sources.☆12Updated last year
- Script to check ModSecurity rules agains some WAF☆12Updated 6 years ago
- Markdown Version of the DHS/CISA Secure Software Development Self Attestation Form.☆21Updated 2 years ago
- OWASP Threat Dragon with Gitlab Integration☆26Updated 7 years ago
- ☆33Updated 2 years ago
- Deceptive tradecraft should be fun and light, not stern and stressful. It is cool to be cute.☆13Updated last year
- Open Security Summit 2018☆29Updated 4 years ago
- Notes and reference for ongoing forecasting.☆16Updated 3 years ago
- go-audit is an alternative to the auditd daemon that ships with many distros☆16Updated 6 years ago
- Looks for GitHub org users without 2FA turned on☆9Updated 8 years ago
- A low/zero interaction ssh authentication logging honeypot☆21Updated 9 months ago
- BlackDuck GItHub Action☆9Updated 2 years ago
- A curated threat modeling library collection☆22Updated last year
- FSL Test bench - Ansible playbook repository to setup a save environment for security auditing and testing. It can be used for teaching s…☆29Updated 5 months ago
- CVE Builder script that generates STIX formatted Exploit Target objects☆18Updated 8 years ago
- Certificate Revocation List monitor☆41Updated 9 months ago
- REST API test utility☆22Updated 5 years ago
- CERTITUDE - A python package to classify malicious URLs☆20Updated 3 years ago
- A starter-kit for a source-controlled, CLI-based osquery management workflow.☆30Updated 6 years ago
- NIST OSCAL SDK and CLI☆38Updated 5 years ago
- 🔐 A concurrent, command-line AWS S3 Fuzzer. Written in Go.☆45Updated 7 years ago
- ☆29Updated last week
- Docker Secure Computing Profile Generator☆48Updated 3 years ago
- A Docker container for Cowrie - SSH honeypot based on kippo☆10Updated 9 years ago
- Collect, curate, and communicate relevant security metrics for open source projects.☆63Updated last year
- Notebook collection☆10Updated 6 years ago
- Your infrastructure is moving and so is your root of trust. This project helps to define a new control plane for locking down access and…☆9Updated 8 years ago
- Passive Bitcoin Project☆10Updated 9 years ago