tf-mythic-azure

Terraforming Mythic This project allows operators to set up multiple Mythic C2 servers in Azure. Optionally, Azure CDN redirectors can be created as well. The idea is that you are able to create multiple "projects" that you can manage from this Terraform code. This way, operators can manage the...

checkov

...

dnscontrol

DNSControl DNSControl is Infrastructure as Code for DNS. It includes a full-featured configuration language Javascript-compatible, plus "plug-ins" that speak to DNS provider APIs such as AWS Route 53, Cloudflare, and Gandi. It can send the same DNS records to multiple providers. It runs anywhere ...

binaryalert

BinaryAlert: Serverless, Real-Time & Retroactive Malware Detection .. image:: https://travis-ci.org/airbnb/binaryalert.svg?branch=master :target: https://travis-ci.org/airbnb/binaryalert :alt: Build Status .. image:: https://coveralls.io/repos/github/airbnb/binaryalert/badge.svg?branch=master...

cfn_nag

背景 cfn-nag ツールは、CloudFormation テンプレート内の安全でないインフラストラクチャを示す可能性のあるパターンを探します。大まかに言うと、以下を探します: 過度に寛容な（ワイルドカード）IAM ルール 過度に寛容な（ワイルドカード）セキュリティグループルール 有効になっていないアクセスログ 有効になっていない暗号化 パスワードリテラル ツールの詳細な背景については、Stelligent のブログの投稿を参照してください: CloudFormation テンプレートの開発プロセスの初期に「cfn-nag」でセキュリティ問題を見つける インストール Gem インストー...

KaiMonkey

KaiMonkey - 취약한 Terraform 인프라 KaiMonkey는 취약한 IaCInfrastructure as Code를 제공하여 IaC를 통해 노출되는 일반적인 클라우드 보안 위협을 탐색하고 이해하는 데 도움을 줍니다. 소개 KaiMonkey는 코드에서 클라우드까지 보안을 유지하기 위해 취해야 할 접근 방식을 분석하고 전략을 수립하는 데 도움이 되도록 취약한 인프라를 코드로 제공하는 playground입니다. 이 프로젝트는 IaC 보안 문제에 익숙해지고 IaC 스캐너가 제대로 작동하는지 확인하는 데 도움이 됩니다...

iac-scan-runner

IaC Scan Runner Service that scans your Infrastructure as Code for common vulnerabilities...

iac-scan-runner

IaC Scan Runner 코드형 인프라Infrastructure as Code에서 일반적인 취약점을 스캔하는 서비스입니다. Aspect| Information ---|--- Tool name| IaC Scan Runner Docker image| xscanner/runner PyPI package| iac-scan-runner Documentation| docs Contact us| [email protected] 목차 설명 실행 Docker로 실행 CLI로 실행 소스에서 실행 라이선스 연락처 감사의 말 목적 및 ...

GHSA-76P8-FHRM-VPC7 vulnerabilities

Vulnerabilities for packages: kapp-controller, minio, rancher-helm, crossplane-provider-aws-datasync-fips, crossplane-provider-aws-eks, cloudnative-pg, kubernetes-csi-external-resizer-fips, go-getter-fips, terraform-provider-kubernetes-fips, crossplane-aws-provider-fips,...

GO-2022-0968 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner-fips, kubeflow-fips, k3d, terraform-provider-sendgrid-fips, terraform-provider-sendgrid, dynamic-localpv-provisioner, kubeflow...

GO-2025-4135 vulnerabilities

Vulnerabilities for packages: skaffold, kube-vip, oras, sops, step, syft, ksops, argocd-image-updater, goreleaser, grafana-agent-operator, timestamp-authority, minio-object-browser, k3s, amazon-cloudwatch-agent, tfsec, crossplane-provider-aws-firehose, dgraph, fq, mongo-tools, nats, rook,...

@aligent/cdk-esbuild (>=2.0.0, <=2.1.0), @aligent/cdk-graphql-mesh-server (>=0.1.5, <=2.17.0) +612 more potentially affected by unknown CVE via aws-cdk-lib (>=2.0.0, <=2.252.0)

aws-cdk-lib NPM version =2.0.0, =2.0.0, =0.1.5, =2.3.7, =2.0.1, =2.0.0, =2.0.0-beta, =0.0.3, =1.2.15, =5.0.0-ampgenconfig.0, =2.7.0-a-cdkv2-graphql-15.0, =5.0.0-beta.0, =4.1.10-alpha.74, =3.0.0-ampgenconfig.0, =3.7.28 and more Source cves: unknown CVE Source advisory: SNYK:JS-AWSCDKLIB-18318518...

aks-poc-setup

AKS Production-Grade POC Setup A comprehensive, production-re...

Operation-Molasses

🍯 OPERATION MOLASSES PEKMEZ Zencefil Efendi's Cyber Dow...

IaC Inventory: A Unified View Across Code, Deployments, and Cloud

As AI applications introduce a new class of infrastructure resources, visibility into what your IaC creates, where it runs, and whether it has drifted has never been more critical...

devops-security-pipeline-poc

DevOps Security Pipeline POC A security-integrated CI/CD pipe...

Can Developers Rely on LLMs for Secure IaC Development?

We investigated the capabilities of GPT-4o and Gemini 2.0 Flash for secure Infrastructure as Code IaC development. For security smell detection, on the Stack Overflow dataset, which primarily contains small, simplified code snippets, the models detected at least 71% of security smells when prompt...

Holoscope: Open and Lightweight Distributed Telescope and Honeypot Platform

The complexity and scale of Internet attacks call for distributed, cooperative observatories capable of monitoring malicious traffic across diverse networks. Holoscope is a lightweight, cloud-native platform designed to simplify the deployment and management of distributed telescope passive and...

lw-cnapp-microservices-iac

Project 2: Microservices with Infrastructure as Code ⚠️ WAR...

The Hidden Dangers of Public Serverless Repositories: An Empirical Security Assessment

Serverless computing has rapidly emerged as a prominent cloud paradigm, enabling developers to focus solely on application logic without the burden of managing servers or underlying infrastructure. Public serverless repositories have become key to accelerating the development of serverless...