adanalvarez

aws-attack-scenarios

A collection of real-world scenarios and code samples demonstrating potential exploitation techniques in AWS services. Designed for educational purposes and security awareness.

aws-centralized-logging

This solution provides an administrator a 360-degree logging view of an AWS account, including both application and infrastructure, as well as AWS-native logs.

aws-edge-honeypot-poc

PoC of a security mechanism using AWS Lambda@Edge, AWS WAF, and honeytokens to identify and block malicious web traffic.

aws-malware-lab

Creation of a laboratory for malware analysis in AWS

awstrailguard

Tool to check the CloudTrail configuration and the services where trails are sent, to detect potential attacks to CloudTrail logging.

ctf

Solutions to CTF challenges

django-defectdojo

DefectDojo is an open-source application vulnerability correlation and security orchestration application

exploit-consul

Script to obtain a reverse shell from consul agent

guarddutyinsightfulalerts

GuardDutyInsightfulAlerts: A Lambda-based system that processes AWS GuardDuty events, enriches them with detailed information, and delivers formatted email notifications for efficient incident analysis and response.

honeypy

A low interaction honeypot.

introlabs

These are the labs for my Intro class. Yes, this is public. Yes, this is intentional.

nuclei-action

Vulnerability Scan with Nuclei

openai-security-review

Let OpenAI comment on your PR with security recommendations.

pentestflutterapp

Repo for the APK used in the blog

postfix-server-setup

simpleautoburp

Python script to launch burp scans automatically

stratus-red-team

:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud

traildiscover

An evolving repository of CloudTrail events with detailed descriptions, MITRE ATT&CK insights, real-world incidents, references and security implications