Prowler is a security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains all CIS controls list…

CloudMapper helps you analyze your Amazon Web Services (AWS) environments.

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

[Node, Python, Java] Repository of sample Custom Rules for AWS Config.

troposphere - Python library to create AWS CloudFormation descriptions

Generate CloudFormation / Terraform / Troposphere templates from your existing AWS resources.

Wazuh - Host and endpoint security

System restore tool for Linux. Creates filesystem snapshots using rsync+hardlinks, or BTRFS snapshots. Supports scheduled snapshots, multiple backup levels, and exclude filters. Snapshots can be re…

A list of interesting payloads, tips and tricks for bug bounty hunters.

Slide decks from my conference presentations

Cuckoo Sandbox is an automated dynamic malware analysis system

Windows Exploit Suggester - Next Generation

Cheat Sheets

Ghidra is a software reverse engineering (SRE) framework

Real Intelligence Threat Analytics

IP address management (IPAM) and data center infrastructure management (DCIM) tool.

Tools, tips, tricks, and more for exploring ICS Security.

Linux distro for intrusion detection, enterprise security monitoring, and log management

OpenPLC Runtime version 3

SQL powered operating system instrumentation, monitoring, and analytics.

Source code about machine learning and security.

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…