Makes A software supply chain framework powered by Nix. Ever needed to run applications locally to try out your code? Execute CI/CD pipelines locally to make sure jobs are being passed. Keep execution environments frozen...
Ox4Shell Deobfuscate Log4Shell payloads with ease. Since the release of the Log4Shell vulnerability (CVE-2021-44228), many tools were created to obfuscate Log4Shell payloads, making the lives of security engineers a nightmare. This tool intends to...
Defense / Vulnerability Analysis
by do son · Published September 16, 2022 · Last modified November 30, 2023
kubeeye KubeEye is an audit tool for Kubernetes to discover Kubernetes resources (by OPA ), cluster components, cluster nodes (by Node-Problem-Detector), and other configurations that are meeting with best practices and giving suggestions for modification. KubeEye supports...
Threatest Threatest is a Go framework for testing threat detection end-to-end. Threatest allows you to detonate an attack technique, and verify that the alert you expect was generated in your favorite security platform. Concepts Detonators A detonator describes...
What is the N3XT ST3P? With the explosive growth of web applications since the early 2000s, web-based attacks have progressively become more rampant. One common solution is the Web App Firewall (WAF). However, tweaking...
stegoWiper: A powerful and flexible active attack for disrupting stegomalware Over the last 10 years, many threat groups have employed stegomalware or other steganography-based techniques to attack organizations from all sectors and in all...
usbsas usbsas is a free and open-source (GPLv3) tool and framework for securely reading untrusted USB mass storage devices. Following the concept of defense-in-depth and the principle of least privilege, usbsas’s goal is to...
Concealed Code Execution Hunt & Hackett presents a set of tools and technical write-ups describing attacking techniques that rely on concealing code execution on Windows. Here you will find explanations of how these techniques work,...
Defense / Vulnerability Analysis
by do son · Published August 14, 2022 · Last modified July 26, 2023
veinmind-tools veinmind-tools is self-developed by chaitin technology, a container security toolset based on veinmind-sdk. Toolset veinmind-runner veinmind-runner it’s a container security host developed by Chaitin Technology. With the background of rich R&D experience, the...
PersistenceSniper PersistenceSniper is a Powershell script that can be used by Blue Teams, Incident Responders, and System Administrators to hunt persistences implanted in Windows machines. The script is also available on Powershell Gallery. The...
django-defender A simple Django reusable app that blocks people from brute forcing login attempts. The goal is to make this as fast as possible so that we do not slow down the login attempts....
bpflock – Lock Linux machines bpflock – eBPF driven security for locking and auditing Linux machines. Note: bpflock is currently in the experimental stage, it may break, options and security semantics may change, and...
tetragon Cilium’s new Tetragon component enables powerful real-time, eBPF-based Security Observability and Runtime Enforcement. Tetragon detects and is able to respond in real-time to security-significant events, such as Process execution events Changes to privileges...
Hubble Hubble is a fully distributed networking and security observability platform for cloud-native workloads. It is built on top of Cilium and eBPF to enable deep visibility into the communication and behavior of services as well as...
goreplay GoReplay is an open-source network monitoring tool which can record your live traffic and use it for shadowing, load testing, monitoring, and detailed analysis. As your application grows, the effort required to test...
Secure Your Connection
