wiz-sec-public / SITFLinks
A comprehensive framework for analyzing and defending against attacks targeting Software Development Life Cycle Infrastructure.
☆50Updated this week
Alternatives and similar repositories for SITF
Users that are interested in SITF are comparing it to the libraries listed below
Sorting:
- ☆30Updated 2 weeks ago
- A set of AWS resources for testing the Log4Shell vulnerability, deployable with terraform☆11Updated 4 years ago
- Tool for obfuscating and deobfuscating data.☆75Updated last year
- Scan your account for the use of untrusted AMIs☆30Updated last month
- A GitHub Actions Supply Chain CTF / Goat☆27Updated 3 weeks ago
- A catalog of services that can be publicly exposed within different cloud providers.☆14Updated last year
- ☆39Updated last year
- ☆44Updated 3 months ago
- ☆60Updated 2 years ago
- ☆46Updated last year
- Repository to archive GCP Documentation for local use☆16Updated 11 months ago
- A PoC to Simulate Ransomware Attack on AWS Environment☆32Updated last year
- Vulnerable by Design AWS Cloud Development Kit (CDK) Infrastructure☆48Updated 2 years ago
- ☆55Updated 2 years ago
- This application was built to help reduce the amount of time it takes to review AWS Lambda code.☆61Updated last year
- ☆29Updated last month
- Permiso Security has created a tool to query snowflake environments for evidence of compromise, based on indicators from Permiso and the …☆73Updated last year
- An AWS IAM Privilege Escalation Path Library☆112Updated 2 weeks ago
- ☆10Updated 3 years ago
- ☆14Updated 3 weeks ago
- ☆18Updated last year
- A tool for scanning public or private AMIs for sensitive files and secrets. The tool follows the research made on AWS CloudQuarry where w…☆113Updated last year
- A tool for secrets management, encryption as a service, and privileged access management☆13Updated 6 months ago
- Fun tools around the EBS Direct API☆19Updated 4 years ago
- An implementation of infrastructure-as-code scanning using dynamic tooling.☆56Updated 4 years ago
- Clean accounts over permissions in GCP infra at scale☆71Updated 2 years ago
- Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts☆61Updated 2 years ago
- A meta-database collecting resources that compile lists of breaches☆21Updated 3 months ago
- A small library to alter AWS API requests; Used for fuzzing research☆22Updated 2 years ago
- PEACH - a step-by-step framework for modeling and improving SaaS and PaaS tenant isolation, by managing the attack surface exposed by use…☆74Updated 3 years ago