Real time event intelligence, fraud and risk decisioning for financial behavior.

A next-generation test runner for Rust.

Mutation testing for Ruby. AI writes your code. AI writes your tests. But who tests the tests?

A simple, lightweight PowerShell script that allows you to remove pre-installed apps, disable telemetry, as well as perform various other changes to declutter and customize your Windows experience.…

Kubernetes Security Training Platform - focusing on security mitigation

Methodology for high-quality web application security testing - https://github.com/tprynn/web-methodology/wiki

Lambda function that streamlines containment of an AWS account compromise

All-in-one auditing toolkit for identifying common security issues in managed Kubernetes environments. Currently supports Amazon EKS.

Trust and Safety Teaching Consortium

first commit

Make your swine run like it's Divine

Suricata, Snort and Zeek IDS rule and pcap testing system

Terraform Pull Request Automation

Incident Response Methodologies 2022

Never ever ever use pixelation as a redaction technique

Real-time HTTP Intrusion Detection

Wiretap is a transparent, VPN-like proxy server that tunnels traffic via WireGuard and requires no special privileges to run.

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

403/401 bypass tool: finds HTTP access-control bypasses via path, method, header and raw-request mutations. Baseline diff, auto-calibration, replayable curl evidence.

An AWS tool to help you create a point in time assessment of your AWS account using Prowler.

Automating situational awareness for cloud penetration tests.

👀 A Kubernetes cluster resource sanitizer

kubeaudit helps you audit your Kubernetes clusters against common security controls

Distribute ordinary bash commands over many systems

Abuse the node.js inspector mechanism in order to force any node.js/electron/v8 based process to execute arbitrary javascript code.

The recursive internet scanner for hackers. 🧡