Starred repositories
Set of tools to assess and improve LLM security.
The Browser Exploitation Framework Project
Use AI to Scan Your Code from the Command Line for security and code smells. Bring your own keys. Supports OpenAI and Gemini
A curated list of resources for learning about application security
Cloud Commotion intends to cause chaos to simulate security incidents
Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.
How many GitHub repositories actually pin by hash?
High-performance extensible build system for reproducible multi-language builds.
Terraform module to provision AWS Transit Gateway, AWS Resource Access Manager (AWS RAM) Resource, and share the Transit Gateway with the Organization or another AWS Account.
This repository contains terraform code to deploy the necessary resources to get started to test AWS Network Firewall.
Awesome secure by default libraries to help you eliminate bug classes!
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
Host and manage multiple Juice Shop instances for security trainings and Capture The Flags
A Broken Application - Very Vulnerable!
Codespaces but open-source, client-only and unopinionated: Works with any IDE and lets you use any cloud, kubernetes or just localhost docker.
Active Directory and Internal Pentest Cheatsheets
Cloud Maturity Model and Assessment tool.
Learn to code securely while having fun through our popular open source in-editor experience, designed for developers, students, and anyone curious about security. Get started for free in under 2 m…
Tips on how to write exploit scripts (faster!)
Cilium Certified Associate Certification Study Guide
☁️ ⚡ Granular, Actionable Adversary Emulation for the Cloud