#1Security integration in CI/CD pipelines, shift-left, and DevOps security automation tools.
Kitploit recommended
mhaskar/bughoundStatic code analysis tool based on Elasticsearch
aaaguirrep/offensive-docker-vpsCreate a VPS on Google Cloud Platform or Digital Ocean easily with Offensive Docker included to launch assessment to the targets.
purpleteam-labs/purpleteam-app-scannerApplication scanning component of purpleteam
shanika04/apache_skywalkingCVE-2020-9483 OR CVE-2020-13921
shanika04/cloudfoundry_uaaCVE-2016-4468
rauc/rauc-1.5-integrationintegration examples for the CVE-2020-25860 fix
purpleteam-labs/purpleteam-tls-checkerTLS checking component of purpleteam
purpleteam-labs/purpleteam-server-scannerServer scanning component of purpleteam
purpleteam-labs/purpleteam-s2-containersStage two containers
purpleteam-labs/purpleteam-orchestratorOrchestration component of purpleteam
purpleteam-labs/purpleteamCLI component of purpleteam
threatspec/threatspecthreatspec - continuous threat modeling, through code
flyniu666/ingress-nginx-0.21-1.19.5based on nginx 1.19.5 to fix for CVE-2018-16843, CVE-2018-16844, CVE-2019-9511, CVE-2019-9513, and CVE-2019-9516
resery/cve-2019-17041Proof-of-concept exploit for CVE-2019-17041, a buffer overflow in rsyslog's parser, demonstrating remote code execution.
dev-sec/ansible-ssh-hardeningThis Ansible role provides numerous security-related ssh configurations, providing all-round base protection.
guettli/fix-cve-2020-15228Python script that automatically patches GitHub Actions workflow files to replace deprecated and insecure ::set-env and ::add-path commands with the…
michenriksen/drawio-threatmodelingDraw.io libraries for threat modeling diagrams
