oseguera12/cowrie-honeypot-digitaloceanMedium-interaction SSH/Telnet honeypot built with Cowrie, Loki, Promtail, and Grafana - provisioned on DigitalOcean via Terraform with a GitLab CI…
open-policy-agent/opaDeclarative policy engine that enables authorization and policy enforcement across services, Kubernetes, Terraform, Docker, and APIs using the Rego…
open-policy-agent/conftestWrite tests against structured configuration data using the Open Policy Agent Rego query language
p0ssuidao/terraguard🛡️ 🔒 This project's goal is to be simple to create and destroy your own VPN service using WireGuard.
awslabs/aws-security-assessment-solutionAn AWS tool to help you create a point in time assessment of your AWS account using Prowler.
kubesphere/kubeeyeCloud-native Kubernetes cluster inspection tool that detects application misconfigurations, unhealthy components, and node problems using custom OPA,…
eilonh/s3crets_scannerAutomated scanner that hunts for secrets (API keys, credentials) accidentally uploaded to public S3 buckets, using truffleHog3 for detection and…
hxsecurity/terraformgoatMulti-cloud vulnerable-by-design deployment tool using Terraform to provision intentionally insecure cloud infrastructure for security training and…
primait/nuvolaGraph-based AWS security analysis tool that dumps cloud configurations, detects misconfigurations, and maps attack paths using a Neo4j digital twin…
davidcoles/vc5A horizontally scalable Direct Server Return layer 4 load balancer for Linux using XDP/eBPF
zeroecco/holosDeclarative KVM/QEMU VM orchestration tool using YAML compose files. Manages multi-VM stacks with cloud-init, SSH, PCI passthrough, and image…
stillbigjosh/adaptix-serverless-c2Serverless C2 transport plugin for AdaptixC2 v1.2 using AWS Lambda + DynamoDB as the relay infrastructure.
qmadev/tf-mythic-azureAutomatically deploying Mythic C2 in Azure using Terraform
semonte/sisuMounts AWS resources as a local filesystem for infrastructure exploration, security auditing, and configuration analysis using standard Unix tools…
d3vzer0/cnc-relayDocker projects to retain beacon source IPs using C2 relaying infra
oriolrius/kafka-keycloak-oauthApache Kafka 4.1.0 (KRaft) with Keycloak OAuth2 authentication using Strimzi - bypasses CVE-2025-27817 URL allowlist restriction
barun121/cve-2024-9264-in-grafana-11.xVulnerability Exploitation using tools Penetration Testing, Grafana, Docker, Kali Linux.
alvin-alvo/safenet-soho-security-frameworkA lightweight, policy-driven framework that brings Zero-Trust micro-segmentation to SOHO networks using WireGuard.
