9984 matches found
prowler
Prowler is the Open Cloud Security Platform trusted by thousands to automate security and compliance in any cloud environment. With thousands of ready-to-use checks and compliance frameworks, Prowler delivers real-time, customizable monitoring and seamless integrations, making cloud security...
Red-Team-Infrastructure-Wiki
This wiki is intended to provide a resource for setting up a resilient Red Team infrastructure. It was made to complement Steve Borosh @424f424f and Jeff Dimmock's @bluscreenofjeff BSides NoVa 2017 talk "Doomsday Preppers: Fortifying Your Red Team Infrastructure" slides If you have an addition...
mcp-security-checklist
🔐 Lista de verificación de seguridad de MCP Una lista de verificación de seguridad práctica y mantenida por la comunidad para equipos que construyen y despliegan servidores Model Context Protocol MCP e infraestructura de agentes de IA. Por qué existe esto MCP se está adoptando rápidamente. La guí...
Antiphishing
Antiphishing — Inteligencia Predictiva de Phishing para Suricata DONAR · VECTORES DEL PANEL · CONTRIBUIR · ENVIAR UN VECTOR · API REST CTI · WIKI Inteligencia Predictiva de Phishing para Suricata — Defensa Preventiva desde el Día Cero Antiphishing es una infraestructura de Inteligencia de Amenaza...
abaddon
Abaddon Red team operations involve miscellaneous skills, last several months and are politically sensitive; they require a lot of monitoring, consolidating and caution. Wavestone’s red team operations management software, Abaddon, has been designed to make red team operations faster, more...
abaddon
Abaddon Las operaciones de red team implican habilidades variadas, duran varios meses y son políticamente sensibles; requieren mucha monitorización, consolidación y precaución. El software de gestión de operaciones de red team de Wavestone, Abaddon, ha sido diseñado para hacer las operaciones de...
metabadger
Metabadger Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 IMDSv2. Metabadger Purpose and functionality Diagnose and evaluate your current usage of the AWS Instance Metadata Service along with understanding how the service works Prepare you t...
cloudquery
CloudOps, without the chaos CloudQuery is a cloud asset inventory built for platform teams. Sync your cloud infrastructure metadata into your data warehouse, powering insights and automation. Unify data and provide context across AWS, Azure, GCP, and 70+ cloud and SaaS sources such as Wiz, Finout...
scanopy
Scanopy Network documentation, without the drawing. Scanopy replaces manual network diagrams with a continuously maintained model of what's actually running. A single daemon scans on a schedule and produces four views from each scan: L2 physical, L3 logical, workloads, and applications. Unlike...
kubesploit
Kubesploit Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent dedicated for containerized environments written in Golang and built on top of Merlin project by Russel Van Tuyl @Ne0nd0g. Our Motivation While researching Docker and Kubernetes, we noticed that...
CVE-2021-44228-white-box
Artículo de revista: https://www.researchgate.net/publication/373214720PengujianKerentananpadaCVE-2021-44228terhadapAncamanRemoteAccessTrojan Tesis: https://1drv.ms/b/s!Al-8jtgY0iBXmz79DKEROaZT5n8a?e=1E6Pkm Log4Shell // n. Entorno de Vulnerabilidad Log4j Este repositorio está construido...
ai-exploits
Exploits de IA El mundo de la IA tiene un problema de seguridad y no solo está en las entradas dadas a LLMs como ChatGPT. Basado en investigaciones realizadas por Protect AI y expertos en seguridad independientes en la Plataforma de Bug Bounty Huntr, existen ataques mucho más impactantes y...
tf-mythic-azure
Terraformando Mythic Este proyecto permite a los operadores configurar múltiples servidores Mythic C2 en Azure. Opcionalmente, también se pueden crear redireccionadores de Azure CDN. La idea es que puedas crear múltiples "proyectos" que puedas gestionar desde este código de Terraform. De esta...
fronthunter
FrontHunter FrontHunter es una herramienta para probar grandes listas de dominios e identificar candidatos para domain fronting. ¿Domain Fronting? ¿En serio? Lo sé, lo sé… el domain fronting es bastante viejo. Pero la verdad es que sigue siendo útil como una característica más para incluir en tu...
teleport
Teleport provides connectivity, authentication, access controls and audit for infrastructure. You might use Teleport to: Set up single sign-on SSO for all of your cloud and on-prem infrastructure. Protect access to servers, Kubernetes clusters, databases, Windows desktops, web applications, and...
muraena
Muraena is an almost-transparent reverse proxy aimed at automating phishing and post-phishing activities. The tool re-implements the 15-years old idea of using a custom reverse proxy to dynamically interact with the origin to be targeted, rather than maintaining and serving static pages...
AI-Infra-Guard
📖 Documentación | 🌐 🇬🇧 English · 🇨🇳 中文 · 🇯🇵 日本語 · 🇪🇸 Español · 🇩🇪 Deutsch · 🇫🇷 Français · 🇰🇷 한국어 · 🇧🇷 Português · 🇷🇺 Русский...
BounceBack
BounceBack ↕️🤫 Stealth redirector for your red team operation security. Overview BounceBack is a powerful, highly customizable and configurable reverse proxy with WAF functionality for hiding your C2/phishing/etc infrastructure from blue teams, sandboxes, scanners, etc. It uses real-time traffic...