Security · GitHub

CyberSecurityRSS: A collection of cybersecurity rss to make you better!

• tiny.opml: focused daily reading (currently 494 feeds / 9 categories)
• CyberSecurityRSS.opml: broad coverage (currently ~1014 feeds / 12 categories)

Open Source Cloud Security

• Discover Attack Paths - Discover toxic risk combinations an attacker can use to penetrate your environment.
• Graphical Context - Understand context behind security findings with graphical visualizations.

Opensabre是基于SpringCloud2023的微服务开发平台，整合了Spring Security、Springcloud Alibaba等组件。 包含了基础的RBAC权限管理、授权认证、网关管理、服务治理、审计日志等系统管理基础应用。 定义了相关开发规范、风格并落地在服务框架层，开箱即用，支持Docker、Kubenetes的部署。 让项目开发人员快速进入业务开发，而不需过多时间花费在基础架构搭建和编码风格规范上。 目标是建立一套金融级、高安全性的微服务解决方案。

Asset discovery and identification tools 快速识别 Web 指纹信息，定位资产类型。辅助红队快速定位目标资产信息，辅助蓝队发现疑似脆弱点

Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能

authenticate, sudo, login with your fingerprint wire(less)ly without having to spend $149 at the cost of some security

A single script to install important Pentesting Tools and wordlists on Debian based Linux OS.

A Model Context Protocol server that provides network asset information based on query conditions. This server allows LLMs to obtain network asset information and supports querying network asset information by zoomeye dork etc.

• Query ZoomEye for network asset information using dorks
• Caching mechanism to improve performance and reduce API calls

一款信息泄漏利用工具，适用于.git/.svn/.DS_Store泄漏和目录列出

• 使用asyncio异步处理速度快

This is a step-by-step guide to implementing a DevSecOps program for any size organization

Attify OS - Distro for pentesting IoT devices

An open source fingerprint browser based on Ungoogled Chromium. 指纹浏览器 隐私浏览器

• --fingerprint - Specifies the fingerprint seed. When enabled, most fingerprinting features take effect - 32-bit integer
• --fingerprint-platform - Specifies the operating system type - windows, linux, macos

Kubernetes networking based on Open vSwitch

• Kubernetes-native: Antrea follows best practices to extend the Kubernetes APIs and provide familiar abstractions to users, while also leveraging Kubernetes libraries in its own implementation.
• Powered by Open vSwitch: Antrea relies on Open vSwitch to implement all networking functions, including Kubernetes Service load-balancing, and to enable hardware offloading in order to support the most demanding workloads.

Automated pentest reporting with custom templates, project tracking, customer dashboard and client management tools. Streamline your security workflows effortlessly!

• Manage Vulnerabilities
• Custom Report Template in Docx or HTML/CSS

Superseded by https://github.com/aquasecurity/trivy-operator

Tfsec is now part of Trivy

• :cloud: Checks for misconfigurations across all major (and some minor) cloud providers
• :no_entry: Hundreds of built-in rules