securestep9 Goto Github PK

shiftleft-terraform-demo

shiftleft-ts-demo

silver

Mass scan IPs for vulnerable services

sirius

open-source general purpose vulnerability scanner (fork)

sitedorks

Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term with a default set of websites, bug bounty programs or a custom collection.

sleepy-puppy

Sleepy Puppy XSS Payload Management Framework

snitch

information gathering via dorks

snowflake-threat-hunter

snyk-deps-to-csv

retrieve all dependencies for all orgs in a group

spiracle

Insecure web application used to test system security controls

spiracle.net

.NET spiracle repo

spiracle.netcore

ssrftest

SSRF testing tool

stinkyphish

Monitor Certificate Transparency Logs For Phishing Domains

stitch

Python Remote Administration Tool (RAT)

streamalert

StreamAlert is a serverless, realtime data analysis framework which empowers you to ingest, analyze, and alert on data from any environment, using datasources and alerting logic you define.

subdomainsbrute

A fast sub domain brute tool for pentesters

sublert

Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.

subra

A Web-UI for subdomain enumeration (subfinder)

subscraper

Subdomain enumeration through various techniques

supersecurebank

A vulnerable demo site for people to learn about Web Application Security

syft

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

ta505plus

TA505+ Adversary Simulation

terraform-provider-incapsula

This package is a plugin for Terraform, and is designed to be used to auto-provision sites in Incapsula via Incapsula’s API from the terraform cli/yaml configurations.

terragoat

TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

tfsec

Security scanner for your Terraform code

threat-model-cookbook

This project is about creating and publishing threat model examples.

threatpinchlookup

Documentation and Sharing Repository for ThreatPinch Lookup Chrome & Firefox Extension

threatspec

threatspec - continuous threat modeling, through code

tictaac

Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. Sugar-Free and Secure: no any external dependencies except for chart plotting are used