Discover appsecco/alldaydevops-shua Open Source project

Damn Vulnerable NodeJS Application

920

dvna

SCSS

686

the-art-of-subdomain-enumeration

This repository contains all the supplement material for the book "The art of sub-domain enumeration"

This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtual conference

633

bugcrowd-levelup-subdomain-enumeration

vulnerable-apps

spaces-finder

A tool to hunt for publicly accessible DigitalOcean Spaces

A step-by-step walkthrough of CloudGoat 2.0 scenarios.

154

attacking-cloudgoat2

133

dvja

Damn Vulnerable Java (EE) Application

Defcon24 Workshop Contents : Ninja Level Infrastructure Monitoring

128

defcon24-infra-monitoring-workshop

124

defcon-26-workshop-attacking-and-auditing-docker-containers

DEF CON 26 Workshop - Attacking & Auditing Docker Containers Using Open Source

107

sqlinjection-training-app

A simple PHP application to learn SQL Injection detection and exploitation techniques.

PHP

VyAPI

VyAPI - A cloud based vulnerable hybrid Android App

Java

using-docker-kubernetes-for-automating-appsec-and-osint-workflows

Repository for all the workshop content delivered at nullcon X on 1st of March 2019

This repo contains the files required to perform a CSRF attack using Flash and HTTP 307 redirections.

json-flash-csrf-poc

ActionScript

dvcsharp-api

Damn Vulnerable C# Application (API)

practical-recon-levelup0x02

This repository contains all the material from the talk "Practical recon techniques for bug hunters & pentesters" given at Bugcrowd LevelUp 0x02 virtual conference

A simple tool to manipulate window objects in Windows

winmanipulate

Visual Basic

opa-traefik-microservice-authz

Proof of concept implementation of a scenario using Open Policy Agent for microservices authorization in API Gateway (Traefik).

Docker container for Markdown based Raneto Knowledgebase

raneto-docker

The repository for Building visualisation platforms for OSINT data using open source solutions

osint-viz-platform-reconvillage

Data Science Command Line Toolbox in a docker container

docker-data-science-toolbox

Shell

docker-datasploit

Docker container for datasploit framework

Shell

sqlinjectionloginbypass

A simple app to demo SQL Injection login bypass

PHP

owasp-threat-dragon-gitlab

OWASP Threat Dragon with Gitlab Integration

Application Security Workflow Automation using Docker and Kubernetes

kubeseco

All Day DevOps - Automated Infrastructure Security Monitoring and Defence (ELK + AWS Lambda)

alldaydevops-aism

This repo contains workshop material delivered at #nullcon2020

devsecops-using-cloudnative-workshop

HTML

datasploit-ansible

Ansible Playbook for setting up Datasploit

ansible-module-owasp-zap

Ansible module for OWASP ZAP using Python API to scan web targets for security issues

HTML

owasp-webgoat-dot-net-docker

Docker container for running OWASP WebGoat.NET application

nullblr-bachaav-aismd

null Bangalore Public Bachaav 10 December 2016 Automated Infrastructure Security Monitoring & Defence

HTML

prowler-aws-securityhub-integration

Using Prowler to Automate Compliance Checks for AWS CIS Benchmarks

CTF write-ups from c0c0n 2019 CTF challenges that we participated

c0c0n-2019-ctf-writeups

bsides-delhi-recon

This repository contains all the material from the talk "Doing recon like it's 2017" given at Bsides Delhi 2017 conference

A simple django app to provide a reverse shell when deployed and invoked.

django-rev-shell

Presentation with proof of concept code on using Google as Identity Provider for Web API authentication using NodeJS as backend and VueJS as frontend

nodejs-google-idp-sample

A minimalist Go API to scan Docker images for security vulnerabilities and weaknesses

container-image-scanner-api

automated-defence-ssh-bruteforce-aws

Source code for Automated Defence - Blocking SSH bruteforce attacks in AWS

Baking secrets in Google Cloud Run containers using Google Cloud Build

secrets-in-google-cloud-run-with-google-cloud-build