60 matches found
tf-mythic-azure
Terraforming Mythic This project allows operators to set up multiple Mythic C2 servers in Azure. Optionally, Azure CDN redirectors can be created as well. The idea is that you are able to create multiple "projects" that you can manage from this Terraform code. This way, operators can manage the...
binaryalert
BinaryAlert: Serverless, Real-Time & Retroactive Malware Detection .. image:: https://travis-ci.org/airbnb/binaryalert.svg?branch=master :target: https://travis-ci.org/airbnb/binaryalert :alt: Build Status .. image:: https://coveralls.io/repos/github/airbnb/binaryalert/badge.svg?branch=master...
iac-scan-runner
IaC Scan Runner Service that scans your Infrastructure as Code for common vulnerabilities...
dnscontrol
DNSControl DNSControl is Infrastructure as Code for DNS. It includes a full-featured configuration language Javascript-compatible, plus "plug-ins" that speak to DNS provider APIs such as AWS Route 53, Cloudflare, and Gandi. It can send the same DNS records to multiple providers. It runs anywhere ...
cfn_nag
Background The cfn-nag tool looks for patterns in CloudFormation templates that may indicate insecure infrastructure. Roughly speaking, it will look for: IAM rules that are too permissive wildcards Security group rules that are too permissive wildcards Access logs that aren't enabled Encryption...
iac-scan-runner
IaC Scan Runner एक सेवा जो आपके Infrastructure as Code को सामान्य कमजोरियों के लिए स्कैन करती है।...
terrascan
⚠️ Archived This project is no longer maintained. The repository is archived and no further updates, issues, or pull requests will be accepted. Feel free to fork it if you'd like to continue development...
GHSA-76P8-FHRM-VPC7 vulnerabilities
Vulnerabilities for packages: docker-cli-buildx-fips, aws-nuke, crossplane-provider-gcp-beta-compute-fips, flux-image-automation-controller, kong-ingress-controller-fips, crossplane-provider-aws-kinesisanalytics, bento, envoy-ai-gateway-fips, trufflehog-fips, k8sgateway, kyverno-notation-aws-fips...
GO-2022-0968 vulnerabilities
Vulnerabilities for packages: terraform-provider-sendgrid-fips, kubeflow, dynamic-localpv-provisioner, kubeflow-fips, terraform-provider-sendgrid, k3d, dynamic-localpv-provisioner-fips...
GO-2025-4135 vulnerabilities
Vulnerabilities for packages: gptscript, eksctl, crossplane-provider-aws-cloudwatchlogs, docker-cli-buildx, git-lfs, cluster-api-aws-controller, kubescape-operator, juicefs-csi-driver, metrics-server, rancher-helm, helm-set-status, fscrypt, nginx-prometheus-exporter,...
@aligent/cdk-esbuild (>=2.0.0, <=2.1.0), @aligent/cdk-graphql-mesh-server (>=0.1.5, <=2.17.0) +612 more potentially affected by unknown CVE via aws-cdk-lib (>=2.0.0, <=2.252.0)
aws-cdk-lib NPM version =2.0.0, =2.0.0, =0.1.5, =2.3.7, =2.0.1, =2.0.0, =2.0.0-beta, =0.0.3, =1.2.15, =5.0.0-ampgenconfig.0, =2.7.0-a-cdkv2-graphql-15.0, =5.0.0-beta.0, =4.1.10-alpha.74, =3.0.0-ampgenconfig.0, =3.7.28 and more Source cves: unknown CVE Source advisory: SNYK:JS-AWSCDKLIB-18318518...
aks-poc-setup
AKS Production-Grade POC Setup A comprehensive, production-re...
Operation-Molasses
🍯 OPERATION MOLASSES PEKMEZ Zencefil Efendi's Cyber Dow...
IaC Inventory: A Unified View Across Code, Deployments, and Cloud
As AI applications introduce a new class of infrastructure resources, visibility into what your IaC creates, where it runs, and whether it has drifted has never been more critical...
devops-security-pipeline-poc
DevOps Security Pipeline POC A security-integrated CI/CD pipe...
Can Developers Rely on LLMs for Secure IaC Development?
We investigated the capabilities of GPT-4o and Gemini 2.0 Flash for secure Infrastructure as Code IaC development. For security smell detection, on the Stack Overflow dataset, which primarily contains small, simplified code snippets, the models detected at least 71% of security smells when prompt...
Holoscope: Open and Lightweight Distributed Telescope and Honeypot Platform
The complexity and scale of Internet attacks call for distributed, cooperative observatories capable of monitoring malicious traffic across diverse networks. Holoscope is a lightweight, cloud-native platform designed to simplify the deployment and management of distributed telescope passive and...
lw-cnapp-microservices-iac
Project 2: Microservices with Infrastructure as Code ⚠️ WAR...
The Hidden Dangers of Public Serverless Repositories: An Empirical Security Assessment
Serverless computing has rapidly emerged as a prominent cloud paradigm, enabling developers to focus solely on application logic without the burden of managing servers or underlying infrastructure. Public serverless repositories have become key to accelerating the development of serverless...