xvnpw / sec-docs
An experimental project using LLM technology to generate security documentation for Open Source Software (OSS) projects
☆27Updated last month
Alternatives and similar repositories for sec-docs:
Users that are interested in sec-docs are comparing it to the libraries listed below
- A powerful tool that leverages AI to automatically generate comprehensive security documentation for your projects☆62Updated 2 weeks ago
- DeRF (Detection Replay Framework) is an "Attacks As A Service" framework, allowing the emulation of offensive techniques and generation o…☆91Updated last year
- LLM Testing Findings Templates☆70Updated last year
- ☆41Updated last month
- 🖇️ STRIDE vs. ASVS equivalence table☆76Updated 7 months ago
- POC tool to create signed AWS API GET requests to bypass Guard Duty alerting of off-instance credential use via SSRF☆58Updated last year
- A fun POC that is built to understand AI security agents.☆25Updated 3 months ago
- AI featured threat modeling and security review action☆43Updated 4 months ago
- ☆36Updated 3 months ago
- A Risk-Based Prioritization Taxonomy for prioritizing CVEs (Common Vulnerabilities and Exposures).☆73Updated 10 months ago
- One Conference 2024☆108Updated 6 months ago
- Cloud Offensive Breach and Risk Assessment (COBRA) Tool☆89Updated last month
- A PoC to Simulate Ransomware Attack on AWS Environment☆30Updated 5 months ago
- A tool to keep AWS pentests and red teams efficient, organized, and stealthy.☆90Updated last year
- A cheatsheet containing AWS CloudTrail events that can be used for Incident Response purposes or Detection Engineering.☆70Updated 10 months ago
- This application was built to help reduce the amount of time it takes to review AWS Lambda code.☆60Updated 4 months ago
- GCP GOAT is the vulnerable application for learn the GCP Security☆64Updated last year
- ☆37Updated 3 weeks ago
- Nextdoor's Cloud Security Posture Management (CSPM) Evaluation Matrix☆58Updated last year
- ☆164Updated 6 months ago
- Vulnerability impact analyzer that reduces false positives in SCA tools by performing intelligent code analysis. Uses agentic AI with ope…☆50Updated last month
- A full insecure kubernetes application for testing security tools☆70Updated last week
- Simple Workspace Attack Tool (SWAT) is a tool for simulating malicious behavior against Google Workspace in reference to the MITRE ATT&CK…☆164Updated 5 months ago
- Offensive Kubernetes Threat Matrix -- kubenomicon.com☆38Updated 2 months ago
- AI featured threat modeling and security review project☆16Updated 4 months ago
- Anvilogic Forge☆95Updated this week
- Determine privileges from cloud credentials via brute-force testing.☆67Updated 7 months ago
- Enriching the NVD CVSS scores to include Temporal & Threat Metrics☆187Updated this week
- A tool for scanning public or private AMIs for sensitive files and secrets. The tool follows the research made on AWS CloudQuarry where w…☆104Updated 4 months ago
- IMDSPOOF is a cyber deception tool that spoofs the AWS IMDS service to return HoneyTokens that can be alerted on.☆101Updated last year