Mobile-Security-Framework-MobSF

Mobile Security Framework MobSF Mobile Security Framework MobSF is a security research platform for mobile applications in Android, iOS and Windows Mobile. MobSF can be used for a variety of use cases such as mobile application security, penetration testing, malware analysis, and privacy analysis...

DevSecOpsGuideline

OWASP DevSecOps Guideline Die OWASP DevSecOps Guideline erklärt, wie wir eine sichere Pipeline implementieren, Best Practices anwenden und Tools einführen können, die wir in dieser Hinsicht nutzen können. Außerdem versucht das Projekt, uns dabei zu helfen, die Shift-Left-Sicherheitskultur in...

cicd-goat

Vorsätzlich anfällige CI/CD-Umgebung. Hacke CI/CD-Pipelines, ergattere die Flaggen. 🚩 Erstellt von Cider Security Übernommen von Palo Alto Networks. Inhaltsverzeichnis...

SecuSphere

SecuSphere Sua Solução Abrangente de DevSecOps Bem-vindo ao SecuSphere, sua solução completa para todas as necessidades de DevSecOps. Nossa plataforma centralizada é projetada de forma especializada para gerenciar e otimizar seu gerenciamento de vulnerabilidades, integração de pipeline CI/CD,...

sslyze

SSLyze SSLyze é uma ferramenta de varredura SSL/TLS rápida e poderosa e uma biblioteca Python. O SSLyze pode analisar a configuração SSL/TLS de um servidor conectando-se a ele, a fim de garantir que ele use configurações de criptografia fortes certificado, suites de cifras, curvas elípticas, etc....

zizmor

🌈 zizmor zizmor ist ein statisches Analysetool für CI/CD-Systeme. Es kann Sicherheitsprobleme in gängigen CI/CD-Setups finden und beheben, einschließlich GitHub Actions, Dependabot und pre-commit. Einige der Dinge, die zizmor findet:...

botb

Break out the Box BOtB BOtB is a container analysis and exploitation tool designed to be used by pentesters and engineers while also being CI/CD friendly with common CI/CD technologies. What does it do? BOtB is a CLI tool which allows you to: Exploit common container vulnerabilities Perform commo...

botb

Ausbruch aus der Box BOtB BOtB ist ein Tool zur Container-Analyse und -Ausnutzung, das für Pentester und Ingenieure entwickelt wurde und gleichzeitig CI/CD-freundlich mit gängigen CI/CD-Technologien ist. Was macht es? BOtB ist ein CLI-Tool, mit dem Sie: Häufige Container-Sicherheitslücken ausnutz...

metlo

Metlo API Security Secure Your API. Metlo is an open-source API security platform Metlo is an open source API security tool you can setup in 15 minutes that inventories your endpoints, detects bad actors and blocks malicious traffic in real time. Detect API attacks in real time. Automatically blo...

juice-shop

OWASP Juice Shop...

automatic-api-attack-tool

Automatic API Attack Tool Imperva's customizable API attack tool takes an API specification as an input, and generates and runs attacks that are based on it as an output. The tool is able to parse an API specification and create fuzzing attack scenarios based on what is defined in the API...

automatic-api-attack-tool

Ferramenta Automática de Ataque a APIs A ferramenta de ataque a APIs personalizável da Imperva recebe uma especificação de API como entrada, e gera e executa ataques baseados nela como saída. A ferramenta é capaz de analisar uma especificação de API e criar cenários de ataque de fuzzing baseados ...

cifswitch-check

cifswitch-check أداة تحقق عبر شيل للتحقق ما إذا كان نظام لينكس معرضًا لثغرة CIFSwitch CVE-2026-46243 — ثغرة رفع صلاحيات محلية في عميل CIFS/SMB لنواة لينكس موجودة منذ عام 2007. تعمل على المضيفات الفعلية، والآلات الافتراضية، وداخل الحاويات. مصممة للاندماج المباشر في أنابيب CI/CD. خلفية تم الإفصاح ع...

trivysupplychainanalysis

Análise Quantitativa de Ataques à Cadeia de Suprimentos CI/CD de Múltiplos Estágios Uma reconstrução quantitativa formalmente verificada do comprometimento da cadeia de suprimentos do GitHub Actions Trivy / "TeamPCP" de março de 2026 CVE-2026-33634 — modelada em TLA+, verificada exaustivamente co...

CVE-2026-11120-Command-Injection-via-Git-URL-in-CI-CD-Pipeline

CVE-2026-11120 – Injeção de Comando via URL do Git no Pipeline de CI/CD Código do Programa Python root@kitploit: cicdbuild.py - Clones repository without sanitizing URL import subprocess, sys def cloneandbuildrepourl: Vulnerability: repourl can contain shell metacharacters cmd = f"git clone repou...

DEFCON-CICD-pipelines-workshop

CI/CD: Das neue Eldorado? Zusammenfassung CI/CD-Pipelines werden zunehmend Teil der Standardinfrastruktur in Entwicklungsteams. Mit dem Aufkommen neuer Ansätze wie Infrastructure as Code steigt die Sensibilität solcher Pipelines schnell. Im Falle einer Kompromittierung sind nicht mehr nur die...

CVE-2026-45321-Tanstack

Simulation eines Supply-Chain-Angriffs — CVE-2026-45321 TanStack Bildungslabor zum Verständnis von npm-Supply-Chain-Angriffen, CI/CD-Missbrauch und Installationszeit-Codeausführung Haftungsausschluss Dieses Projekt wurde ausschließlich erstellt für: Cybersicherheitsbildung, defensive...

openclarity

OpenClarity is an open source tool for agentless detection and management of Virtual Machine Software Bill Of Materials SBOM and security threats such as vulnerabilities, exploits, malware, rootkits, misconfigurations and leaked secrets. Join OpenClarity's Slack channel to hear about the latest...

kube-score

kube-score kube-score is a tool that performs static code analysis of your Kubernetes object definitions. The output is a list of recommendations of what you can improve to make your application more secure and resilient. You can test kube-score out in the browser with the...

dnsx-action

dnsx Action macht es einfach, dnsx mit GitHub Action zu orchestrieren. Beispielnutzung GitHub Action, diednsx auf einer Liste von Hosts ausführt root@kitploit: - name: 💥 dnsx - DNS Resolver uses: projectdiscovery/dnsx-action@main with: list: hosts.txt GitHub Action, diednsx mit benutzerdefinierte...