Cloud Commotion intends to cause chaos to simulate security incidents

AI-driven Threat modeling-as-a-Code (TaaC-AI)

An AI-powered threat modeling tool that leverages OpenAI's GPT models to generate threat models for a given application based on the STRIDE methodology.

a lightweight, security focused, BDD test framework against terraform.

Regula checks infrastructure as code templates (Terraform, CloudFormation, k8s manifests) for AWS, Azure, Google Cloud, and Kubernetes security and compliance using Open Policy Agent/Rego

Get data from Morningstar

This project is a set of simple codes and programs to help download financial information from various websites, such as Yahoo Finance and MorningStar.

msfinance offers Pythonic way to download market data from morningstar.com

leaked prompts of GPTs

Chat with your documents on your local device using GPT models. No data leaves your device and 100% private.

Chat with your documents offline using AI.

Open-source desktop app for local LLMs. Text, vision, tool-calling, OpenAI/Anthropic-compatible API. 100% private.

The beginner's guide to eBPF

Awesome free cloud native security learning labs. Includes CTF, self-hosted workshops, guided vulnerability labs, and research labs.

Common project repo for all Argo Projects

Tool to validate assumptions about the network

Markdown Version of the DHS/CISA Secure Software Development Self Attestation Form.

Locally run an Instruction-Tuned Chat-Style LLM

Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azur…

This is a collection of threat detection rules / rules engines that I have come across.

A curated list of resources about detecting threats and defending Kubernetes systems.

CLI tool to perform cost analysis on your AWS account with Slack integration

A multi-sandbox container runtime that provides cloud-native, all-scenario multiple sandbox container solutions.

A feature-rich command-line audio/video downloader

Create notes during a security code review in VSCode 📝 Import your favorite SAST tool findings 🛠️ and collaborate with others 🤝

Burp Suite Certified Practitioner Exam Study

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

Secrets Patterns DB: The largest open-source Database for detecting secrets, API keys, passwords, tokens, and more.

🤖 Assemble, configure, and deploy autonomous AI Agents in your browser.