🛡️ Open-source and cloud-native Web Application Firewall (WAF)

articles

Information Security Monitoring System

Vagrant is a tool for building and distributing development environments.

Vulnerable web application

Penetration Testing Lab

Ansible Docker Image based on Alpine Linux (266 MB)

Hack Night is an open weekly training session run by the OSIRIS lab.

A list of web application security

Software-Defined Networking tools for LXC (LinuX Containers)

👴🏻 The only tool that parses your ModSecurity audit logs to generate exceptions automagically ;)

Networking lab using root-less VM

a javascript static security analysis tool

A guide for styling your node.js / JavaScript code. Fork & adjust to your taste.

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

Base Docker image which contains Python 2.7, Grunt, Gulp, Webpack and Bower

A collection of post-exploitation tools for network red teaming.

Vulnerability Static Analysis for Containers

A simple PHP library for querying the Project Honeypot Http:BL API.

like mime, but simpler - a simple, human-readable file format

😎 Awesome lists about all kinds of interesting topics

A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.

HTTP logging and information retrieval tool

Documentation and advice on starting a security program at a small/new company

Kojoney2 is a low interaction SSH honeypot written in Python. Based on Kojoney by Jose Antonio Coret

an awesome list of honeypot resources

Python module for syslog-ng which pushes log messages as JSON to SQS

The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

NTP logger/honeypot