iamchrisv Goto Github PK

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

awesome-incident-response

A curated list of tools for incident response

aws-oidc

AWS OIDC Federation

go-pagerduty-slack-sync

A small app to sync pagerduty on call groups to slack groups

intro-to-semgrep

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

policy_sentry

IAM Least Privilege Policy Generator

saml2aws

CLI tool which enables you to login and retrieve AWS temporary credentials using a SAML IDP

security-policy-templates

A set of policies, standards and control procedures with mapping to HIPAA, NIST CSF, PCI DSS, FedRAMP, CIS Controls

semgrep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

slack-alias-plugin

Auto-expand mentions of certain alias to their respective users, so you can ping groups of people all at once w/o pinging @channel or @group

slack-smart-alias

A lambda that lets you dynamically set a user group/alias like `@oncall` based on a schedule

sublist3r

Fast subdomains enumeration tool for penetration testers

super-linter

Combination of multiple linters to install as a GitHub Action

test

trailscraper

A command-line tool to get valuable information out of AWS CloudTrail

wheel-of-misfortune

A role-playing game for incident management training

wstg

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.