CISO Assistant is a one-stop-shop for GRC, covering Risk, AppSec, Compliance/Audit Management, Privacy and supporting +100 frameworks worldwide with auto-mapping: NIST CSF, ISO 27001, SOC2, CIS, PC…

ScriptSentry finds misconfigured and dangerous logon scripts.

A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.

Big Iron Recon & Pwnage

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

SocialPwned is an OSINT tool that allows to get the emails, from a target, published in social networks such as Instagram, Linkedin and Twitter to find possible credentials leaks in PwnDB or Dehash…

a tool to help operate in EDRs' blind spots

💯 Curated coding interview preparation materials for busy software engineers

All the resources you need to get to Senior Engineer and beyond

freeCodeCamp.org's open-source codebase and curriculum. Learn math, programming, and computer science for free.

List of books, blogs, newsletters and people!

Tips and resources to prepare for Behavioral interviews.

Newsletter to help busy software engineers become good at system design 👇

Interactive roadmaps, guides and other educational content to help developers grow in their careers.

High performance websocket server

Adaptive AWS Zero Trust Policy made easy: Auto-generate least-privilege policies based on user activity in real time! Accelerate the adoption of smart access control

TRAM is an open-source platform designed to advance research into automating the mapping of cyber threat intelligence reports to MITRE ATT&CK®.

Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flow…

Anvilogic Forge

Enriching the NVD CVSS scores to include Temporal & Threat Metrics

Regularly updated page with relevant data of cyber being business enabler

Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs

Prowler is the Open Cloud Security for AWS, Azure, GCP, Kubernetes, M365 and more. As agent-less, it helps for continuous monitoring, security assessments & audits, incident response, compliance, h…

The alternative solution for AWS Organizations SCP feature which is not available in AWS China yet.

A lightweight, backend-free open data portal, powered by Jekyll

A lightweight, backend-free open data portal, powered by Jekyll

Development environment for catalog.data.gov

FedRAMP Automation

A curated list of my GitHub stars by stargazed