Appsecco

All

52 repositories

dvcsharp-api
Public
Damn Vulnerable C# Application (API)
C#
•
MIT License
•219•71•4•6•Updated Jul 15, 2024Jul 15, 2024
kubernetes-ptaas-scripts
Public
Scripts to generate kubeconfig files required to perform a PT.
Shell
•
MIT License
•0•1•0•0•Updated Apr 29, 2024Apr 29, 2024
dvna
Public
Damn Vulnerable NodeJS Application
nodejs testing security hack owasp vulnerable owasp-top-10 vulnerable-apps dvna
SCSS
•
MIT License
•709•706•2•9•Updated Mar 27, 2024Mar 27, 2024
dvja
Public
Damn Vulnerable Java (EE) Application
java vulnerable-app docker
CSS
•
MIT License
•478•130•2•16•Updated Jan 23, 2024Jan 23, 2024
kubeseco
Public
Application Security Workflow Automation using Docker and Kubernetes
JavaScript
•
MIT License
•12•22•2•6•Updated Dec 11, 2022Dec 11, 2022
breaking-and-pwning-apps-and-servers-aws-azure-training
Public
Course content, lab setup instructions and documentation of our very popular Breaking and Pwning Apps and Servers on AWS and Azure hands on training!
opensource penetration-testing free application-security pentesting aws-security azure-security
CSS
•
MIT License
•257•927•1•0•Updated Nov 26, 2022Nov 26, 2022
sqlinjection-training-app
Public
A simple PHP application to learn SQL Injection detection and exploitation techniques.
exploit sql-injection application-security web-security appsec vulnerable-web-app owasp-top-10 owasp-top-ten vulnerable-apps training-app
PHP
•
MIT License
•55•99•0•1•Updated Oct 18, 2022Oct 18, 2022
prowler-aws-securityhub-integration
Public
Using Prowler to Automate Compliance Checks for AWS CIS Benchmarks
Python
•
MIT License
•7•8•0•0•Updated Oct 11, 2022Oct 11, 2022
django-rev-shell
Public
A simple django app to provide a reverse shell when deployed and invoked.
Python
•
MIT License
•3•4•0•0•Updated May 30, 2022May 30, 2022
vulnerable-apps
Public
docker security ansible applications labs vulnerabilities
Python
•
Apache License 2.0
•62•215•0•0•Updated Mar 25, 2022Mar 25, 2022
opa-traefik-microservice-authz
Public
Proof of concept implementation of a scenario using Open Policy Agent for microservices authorization in API Gateway (Traefik).
JavaScript
•
MIT License
•9•42•0•1•Updated Jan 5, 2021Jan 5, 2021
raneto-docker
Public
Docker container for Markdown based Raneto Knowledgebase
docker markdown devops automation knowledgebase raneto
JavaScript
•14•38•0•1•Updated Dec 28, 2020Dec 28, 2020
sqlinjectionloginbypass
Public
A simple app to demo SQL Injection login bypass
PHP
•
MIT License
•17•25•0•0•Updated Dec 15, 2020Dec 15, 2020
anchore-engine
Public
A service that analyzes docker images and applies user-defined acceptance policies to allow automated container image validation and certification
Python
•
Apache License 2.0
•272•0•0•0•Updated Sep 10, 2020Sep 10, 2020
asn-search-api
Public
A Golang API over MaxMind ASN database
Go
•
MIT License
•3•2•0•0•Updated Jul 30, 2020Jul 30, 2020
container-image-scanner-api
Public
A minimalist Go API to scan Docker images for security vulnerabilities and weaknesses
Go
•
MIT License
•4•2•0•0•Updated Jul 30, 2020Jul 30, 2020
CloudPentestCheatsheets
Public
This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.
MIT License
•513•22•0•0•Updated Jun 14, 2020Jun 14, 2020
kube-scan
Public
kube-scan: Octarine k8s cluster risk assessment tool
Go
•
MIT License
•101•1•0•0•Updated May 11, 2020May 11, 2020
attacking-cloudgoat2
Public
A step-by-step walkthrough of CloudGoat 2.0 scenarios.
aws documentation pentesting walkthrough aws-security cloud-security pentesting-resources cloudgoat
MIT License
•53•133•0•0•Updated Apr 28, 2020Apr 28, 2020
kccss
Public
Kubernetes Common Configuration Scoring System
TypeScript
•
MIT License
•22•0•0•0•Updated Apr 23, 2020Apr 23, 2020
secrets-in-google-cloud-run-with-google-cloud-build
Public
Baking secrets in Google Cloud Run containers using Google Cloud Build
Python
•
MIT License
•2•2•0•0•Updated Mar 18, 2020Mar 18, 2020
devsecops-using-cloudnative-workshop
Public
This repo contains workshop material delivered at #nullcon2020
HTML
•
MIT License
•16•15•0•1•Updated Mar 6, 2020Mar 6, 2020
VyAPI
Public
VyAPI - A cloud based vulnerable hybrid Android App
application-security aws-cognito mobile-security vulnerable-app
Java
•
MIT License
•23•84•1•0•Updated Feb 21, 2020Feb 21, 2020
spaces-finder
Public
A tool to hunt for publicly accessible DigitalOcean Spaces
osint infosec pentesting recon reconnaissance digitalocean-spaces spaces-finder
Python
•
MIT License
•27•154•0•0•Updated Jan 21, 2020Jan 21, 2020
defcon-26-workshop-attacking-and-auditing-docker-containers
Public
DEF CON 26 Workshop - Attacking & Auditing Docker Containers Using Open Source
docker security security-audit opensource containers pentesting defcon
40•106•0•1•Updated Nov 18, 2019Nov 18, 2019
c0c0n-2019-ctf-writeups
Public
CTF write-ups from c0c0n 2019 CTF challenges that we participated
MIT License
•5•7•0•0•Updated Oct 5, 2019Oct 5, 2019
J2M
Public
[UNMAINTAINED] Convert from JIRA text formatting to GitHub Flavored MarkDown and back again
JavaScript
•135•0•0•0•Updated Jun 16, 2019Jun 16, 2019
using-docker-kubernetes-for-automating-appsec-and-osint-workflows
Public
Repository for all the workshop content delivered at nullcon X on 1st of March 2019
docker kubernetes osint zap kubernetes-cluster nats minio application-security
CSS
•
MIT License
•36•81•1•0•Updated Apr 4, 2019Apr 4, 2019
nodejs-google-idp-sample
Public
Presentation with proof of concept code on using Google as Identity Provider for Web API authentication using NodeJS as backend and VueJS as frontend
JavaScript
•
MIT License
•1•3•0•0•Updated Feb 9, 2019Feb 9, 2019
bugcrowd-levelup-subdomain-enumeration
Public
This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtual conference
dns osint domains subdomain enumeration certificate-transparency pentesting levelup dnssec bugcrowd
Python
•162•634•2•0•Updated Feb 5, 2019Feb 5, 2019