dragon040 Goto Github PK

ansible-os-hardening

This Ansible role provides numerous security-related configurations, providing all-round base protection.

ansible-ssh-hardening

This Ansible role provides numerous security-related ssh configurations, providing all-round base protection.

auditng

awesome-bug-bounty

A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.

awesome-infosec

A curated list of awesome infosec courses and training resources.

awesome-web-security

🐶 A curated list of Web Security materials and resources.

aws_security_tools

Scripts and tools for AWS Pentest

benchmark

OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually exploitable, it’s a fair test for any kind of vulnerability detection tool. For more details on this project, please see the OWASP Benchmark Project home page.

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

burp-image-metadata

Burp and ZAP plugin that display image metadata (JPEG Exif or PNG text chunk).

burp-retire-js

Burp/ZAP extension that integrate Retire.js repository to find vulnerable Javascript libraries.

chef-os-hardening

This chef cookbook provides numerous security-related configurations, providing all-round base protection.

ci-integrations

Example scripts to run Tinfoil Security via your CI

cis-docker-benchmark

CIS Docker Benchmark - InSpec Profile

cis-kubernetes-benchmark

CIS Kubernetes Benchmark - InSpec Profile

cmsscan

CMS Scanner: Scan Wordpress, Drupal, Joomla, vBulletin websites for Security issues

demoit

Live coding demos without Context Switching

dockerlabs

Docker | Kubernetes - Beginners | Intermediate | Advanced

dragon040.github.io

sample website

git-secrets

Prevents you from committing secrets and credentials into git repositories

hashicat-aws

Sample app for Terraform workshops

hashicat-azure

Sample app for Terraform workshops

hugo-dragon-website

jsql-injection

jSQL Injection is a Java application for automatic SQL database injection.

k8s-sec.github.io

Links and resources for the O'Reilly Kubernetes Security book

k8s_learning

kube-hunter

Hunt for security weaknesses in Kubernetes clusters

linuxflaw

This repo records all the vulnerabilities of linux software I have reproduced in my local workspace

madhuakula.com

mobile-security-framework-mobsf

Mobile Security Framework is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing framework capable of performing static analysis, dynamic analysis, malware analysis and web API testing.