Configuration Management (CM) Security Playground. A small enterprise security lab to practice automation + CM tooling like Ansible, Chef, Puppet, SaltStack, DSCv2, DSCv3.
☆26Jul 21, 2025Updated last year
Alternatives and similar repositories for CMLab
Users that are interested in CMLab are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A small security playground implementation of GHOSTS User Simulation framework with an Active Directory deployment and Elastic.☆20Jul 17, 2024Updated 2 years ago
- LLM-Powered Code Security Scanning☆24Apr 2, 2025Updated last year
- An example of a mis-configured Rails application release under MIT license.☆21Jan 19, 2023Updated 3 years ago
- An automated Adversary Emulation lab with terraform and MCP server. Build Caldera techniques and operations assisted with LLMs. Built f…☆220Nov 23, 2025Updated 9 months ago
- ☆28Oct 2, 2025Updated 11 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- All my POC related to malware development☆15Aug 4, 2026Updated 3 weeks ago
- GitHub repository for the API Security for White Hat Hackers book☆16May 31, 2024Updated 2 years ago
- Rsources that are publicly available, these resources are linked to the SANS SEC598 Class☆45Updated this week
- Create a MS Word index file from PowerPoint notes and slides☆46Sep 6, 2025Updated 11 months ago
- Solution to setup a recurring Security Hub CSV full report with email notification to provide detailed report of the security posture.☆23Nov 11, 2025Updated 9 months ago
- Slide deck for DEF CON 30 - Read Team Village - Offensive Wireless Security presentation☆14Aug 16, 2022Updated 4 years ago
- VoIP Hopper Network Penetration Testing Tool - Jumping from one VLAN to the next! A network infrastructure penetration testing security …☆82Jan 30, 2024Updated 2 years ago
- Awesome List of Enterprise Security Tools' Community Edition☆16Jul 29, 2026Updated last month
- A serverless C2 framework☆14Feb 3, 2023Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆30Jan 15, 2017Updated 9 years ago
- Pentesting tool to automate common op tasks and organize discovered data.☆14Updated this week
- DEF CON 31 AI Village - LLMs: Loose Lips Multipliers☆10Aug 16, 2023Updated 3 years ago
- ## Auto-archived due to inactivity. ## Tooling to simulate runtime attacks and test default runtime detections from Datadog Cloud Securit…☆39Oct 17, 2024Updated last year
- A Docker container for remote penetration testing.☆141Mar 16, 2021Updated 5 years ago
- A tool to run and validate telemetry for Atomic Red Team tests☆17Mar 21, 2024Updated 2 years ago
- Github profile☆23Feb 2, 2026Updated 7 months ago
- IMDSPOOF is a cyber deception tool that spoofs the AWS IMDS service to return HoneyTokens that can be alerted on.☆106Nov 24, 2023Updated 2 years ago
- Whois for the Cloud: Recon tool for cloud provider attribution. Supports AWS, Azure, Google, Cloudflare, and Digital Ocean.☆188Oct 9, 2025Updated 10 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- A framework and taxonomy for identifying, classifying, and reasoning about detection logic bugs in SIEM, EDR, and XDR rules, with concret…☆61Mar 5, 2026Updated 5 months ago
- BlackBerry Threat Research & Intelligence☆100Oct 20, 2023Updated 2 years ago
- Sentinel Recon Tools Workbook☆14Aug 24, 2022Updated 4 years ago
- Siphon converts virtually any content source into clean, readable Markdown. Built for developers, pentesters, appsec professionals, and a…☆14Mar 14, 2026Updated 5 months ago
- URLess is a simple but powerful tool that removes paths from URLs, generating multiple variations of the base domain. This is useful for …☆15Apr 1, 2025Updated last year
- ☆16Aug 6, 2026Updated 3 weeks ago
- DeRF (Detection Replay Framework) is an "Attacks As A Service" framework, allowing the emulation of offensive techniques and generation o…☆100Jan 12, 2024Updated 2 years ago
- A burpsuite extension that helps security researchers find public security reports published on h1 based on the selected host☆43May 9, 2020Updated 6 years ago
- Terraform resources for building HTTP, DNS, phishing, and mail server red team infrastructure☆95Jun 20, 2019Updated 7 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A collection of CyberChef recipes for decoding and decrypting strings in HTML attachments☆11Jul 10, 2024Updated 2 years ago
- OWASP Foundation Web Respository☆16Oct 9, 2025Updated 10 months ago
- Tools to enumerate and find Bluetooth Adapters☆14Updated this week
- ☆21Oct 22, 2025Updated 10 months ago
- Project Sesame is an open-source demo web application built with node.js, designed to provide a hands-on environment for web developers t…☆15Aug 21, 2026Updated last week
- ☆141Mar 29, 2023Updated 3 years ago
- ☆37Jun 27, 2020Updated 6 years ago