dnscontrol

DNSControl DNSControl è Infrastructure as Code per il DNS. Include un linguaggio di configurazione completo compatibile con JavaScript, oltre a "plugin" che si interfacciano con le API dei provider DNS come AWS Route 53, Cloudflare e Gandi. Può inviare gli stessi record DNS a più provider. Funzio...

checkov

...

binaryalert

BinaryAlert: Serverless, Real-Time & Retroactive Malware Detection .. image:: https://travis-ci.org/airbnb/binaryalert.svg?branch=master :target: https://travis-ci.org/airbnb/binaryalert :alt: Build Status .. image:: https://coveralls.io/repos/github/airbnb/binaryalert/badge.svg?branch=master...

KaiMonkey

KaiMonkey - Infrastruttura Terraform Vulnerabile KaiMonkey fornisce infrastruttura vulnerabile come codice IaC per aiutare a esplorare e comprendere le minacce comuni alla sicurezza del cloud esposte tramite IaC. Introduzione KaiMonkey è uno sforzo per fornire un parco giochi di infrastruttura...

iac-scan-runner

IaC Scan Runner Service that scans your Infrastructure as Code for common vulnerabilities...

iac-scan-runner

IaC Scan Runner Servizio che scansiona la tua Infrastructure as Code alla ricerca di vulnerabilità comuni...

tf-mythic-azure

Terraforming Mythic Dieses Projekt ermöglicht es Operatoren, mehrere Mythic C2-Server in Azure einzurichten. Optional können auch Azure CDN-Redirectoren erstellt werden. Die Idee ist, dass Sie mehrere „Projekte“ erstellen können, die Sie über diesen Terraform-Code verwalten können. Auf diese Weis...

cfn_nag

Contesto Lo strumento cfn-nag cerca nei modelli CloudFormation pattern che potrebbero indicare infrastrutture non sicure. In parole povere, cerca: Regole IAM troppo permissive wildcard Regole per i security group troppo permissive wildcard Log di accesso non abilitati Crittografia non abilitata...

GHSA-76P8-FHRM-VPC7 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, crossplane-provider-aws-swf, crossplane-provider-aws-servicecatalog-fips, crossplane-provider-aws-rolesanywhere-fips, local-static-provisioner-fips, omnictl-multiarch-fips, starrocks-kubernetes-operator, vault-fips,...

GO-2022-0968 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, kubeflow-fips, kubeflow, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid, k3d, terraform-provider-sendgrid-fips...

GO-2025-4135 vulnerabilities

Vulnerabilities for packages: mkcert, grafana-operator, flux-kustomize-controller, terraform-provider-google, terraform-provider-pagerduty, cosign, step, wireguard-go, mc, opencost, sealed-secrets, dbmate, spegel, cfssl, crossplane-provider-azure-managedidentity, pulumi-language-dotnet,...

@aligent/cdk-esbuild (>=2.0.0, <=2.1.0), @aligent/cdk-graphql-mesh-server (>=0.1.5, <=2.17.0) +613 more potentially affected by unknown CVE via aws-cdk-lib (>=2.0.0, <=2.252.0)

aws-cdk-lib NPM version =2.0.0, =2.0.0, =0.1.5, =2.3.7, =2.0.1, =2.0.0, =2.0.0-beta, =0.0.3, =1.2.15, =5.0.0-ampgenconfig.0, =2.7.0-a-cdkv2-graphql-15.0, =5.0.0-beta.0, =4.1.10-alpha.74, =3.0.0-ampgenconfig.0, =3.7.28 and more Source cves: unknown CVE Source advisory: SNYK:JS-AWSCDKLIB-18318518...

aks-poc-setup

AKS Production-Grade POC Setup A comprehensive, production-re...

Operation-Molasses

🍯 OPERATION MOLASSES PEKMEZ Zencefil Efendi's Cyber Dow...

IaC Inventory: A Unified View Across Code, Deployments, and Cloud

As AI applications introduce a new class of infrastructure resources, visibility into what your IaC creates, where it runs, and whether it has drifted has never been more critical...

devops-security-pipeline-poc

DevOps Security Pipeline POC A security-integrated CI/CD pipe...

Can Developers Rely on LLMs for Secure IaC Development?

We investigated the capabilities of GPT-4o and Gemini 2.0 Flash for secure Infrastructure as Code IaC development. For security smell detection, on the Stack Overflow dataset, which primarily contains small, simplified code snippets, the models detected at least 71% of security smells when prompt...

Holoscope: Open and Lightweight Distributed Telescope and Honeypot Platform

The complexity and scale of Internet attacks call for distributed, cooperative observatories capable of monitoring malicious traffic across diverse networks. Holoscope is a lightweight, cloud-native platform designed to simplify the deployment and management of distributed telescope passive and...

lw-cnapp-microservices-iac

Project 2: Microservices with Infrastructure as Code ⚠️ WAR...

The Hidden Dangers of Public Serverless Repositories: An Empirical Security Assessment

Serverless computing has rapidly emerged as a prominent cloud paradigm, enabling developers to focus solely on application logic without the burden of managing servers or underlying infrastructure. Public serverless repositories have become key to accelerating the development of serverless...