Deploying to AWS with Ansible and Terraform, Moosa Khalid, 051320

HOL assets for Working with CloudFormation Nested Stacks

Resources for HoL Building a Serverless Application Using Step Functions, API Gateway, Lambda, and S3 in AWS

Remediate SAST results using AI

Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. Sugar-Free and Secure: no any external dependencies except f…

Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submissio…

Content released at NorthSec 2018 for my talk on prototype pollution

Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data

DEPRECATED - A prototype SSH configuration and policy scanner (Blog: https://mozilla.github.io/ssh_scan/)

A comprehensive list of books on Software Architecture.

Presentation about modern authentication

Here are some common interview questions for an application security position you can review for your own interview, along with example answers

A collection of security related Python and Bash shell scripts. Analyze hosts on generic security vulnerabilities. Wrapper around popular tools like nmap (portscanner), nikto (webscanner) and tests…

Several Python scripts to test a web application for security issues using Python

Generate diagrams from textual description

Everything I needed to understand what was going on with "Spring4Shell" - translated source materials, exploit, links to demo apps, and more.

Pre-crisis Risk Management for Personal Finance

Solution Architecture links, articles, books, video lessons, etc.

Curated resources help you prepare for the CNCF/Linux Foundation CKS 2021 "Kubernetes Certified Security Specialist" Certification exam. Please provide feedback or requests by raising issues, or ma…

Online resources that will help you prepare for taking the CNCF/Linux Foundation CKS 2020 "Kubernetes Certified Security Specialist" Certification exam. with time, This is not likely the comprehens…

Amazon Web Services (AWS) Microsoft Threat Modeling Tool Template

Spring Boot web application vulnerable to Log4Shell (CVE-2021-44228).

Six Degrees of Domain Admin