devopsred Goto Github PK

auto.sh

This script is (Mainly) for Beginner's

aws-s3-virusscan

Free Antivirus for S3 Buckets

aws_pwn

A collection of AWS penetration testing junk

azure-terraform

Azure terraform sample

cfn-flow

A practical workflow for AWS CloudFormation

codedeploy-blue-green

These artifacts are associated with the blog post on Blue/Green Deployments with CodeDeploy.

crithit

Takes a single wordlist item and tests it one by one over a large collection of websites before moving onto the next. Create signatures to cross-check vulnerabilities over multiple hosts.

devopskit-docs

dnsvalidator

Maintains a list of IPv4 DNS servers by verifying them against baseline servers, and ensuring accurate responses.

fprobe

Take a list of domains/subdomains and probe for working http/https server.

gaia

Build powerful pipelines in any programming language.

gaussrf

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl and Filter Urls With OpenRedirection or SSRF Parameters.

gitleaks

Audit git repos for secrets 🔑

htp-zines

A collection of Hack The Planet's zines.

inception

A highly configurable tool to check for whatever you like against any number of hosts.

jenkins-example

A demonstration of a continuous integration pipeline focused on security testing

k8s-blue-green-deployment

Fully automated K8s blue green deployments

offensive-infrastructure

Offensive Infrastructure with Modern Technologies

pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

pathbrute

Pathbrute

prowler

AWS Security Best Practices Assessment, Auditing, Hardening and Forensics Readiness Tool. It follows guidelines of the CIS Amazon Web Services Foundations Benchmark and DOZENS of additional checks including GDPR and HIPAA (+90). Official CIS for AWS guide: https://d0.awsstatic.com/whitepapers/compliance/AWS_CIS_Foundations_Benchmark.pdf

quiver

Quiver is the tool to manage all of your tools. It's an opinionated and curated collection of commands, notes and scripts for bug bounty hunting and penetration testing.

reconness

ReconNess Web App Tool

strato-aws-examples

subjs

A tool to get javascript files from a list of URLS or subdomains

terraformonazure

A few examples of using Terraform on Azure for your IAC needs

trufflehog

Searches through git repositories for high entropy strings and secrets, digging deep into commit history