Discover tenable/labs Open Source project by @tenable

A curated list of large language model tools for cybersecurity research.

386

awesome-llm-cybersecurity-tools

379

pyTenable

Python Library for interfacing into Tenable's platform APIs

A collection of Ghidra scripts, including the GPT-3 powered code analyser and annotator, G-3PO.

350

ghidra_tools

CNAPPgoat is an open source project designed to modularly provision vulnerable-by-design components in cloud environments.

293

cnappgoat

265

access-undenied-aws

Access Undenied parses AWS AccessDenied CloudTrail events, explains the reasons for them, and offers actionable remediation steps. Open-sourced by Ermetic.

The pocket-sized wireless sniffer

255

pi_sniffer

router_badusb

upnp_info

A simple script for discovery and analysis of UPnP servers

A toolkit for helping you reverse engineer ESP32 firmware.

165

esp32_image_parser

159

DiscordClient

An AI-powered tool for discovering privilege escalation opportunities in AWS IAM configurations.

EscalateGPT

KaiMonkey provides vulnerable infrastructure as code (IaC) to help explore and understand common cloud security threats exposed via IaC.

KaiMonkey

an extension for Burp Suite to allow researchers to utilize GPT for analys is of HTTP requests and responses

Burp-extension-for-GPT

PowerShell Module for automating Tenable Nessus Vulnerability Scanner.

Posh-Nessus

Tenable.io SDK offers a scalable and safe way to integrate with the Tenable.io platform.

Tenable.io-SDK-for-Python

Scripts to help work with configuration audit files

audit_scripts

integration-jira-cloud

Terrascan GitHub action. Scan infrastructure as code including Terraform, Kubernetes, Helm, and Kustomize file for security best practices.

yara-rules

Repository of yara rules

YARA

terrascan-action

Demo files for 'The Boring Stuff - Flask Logging' blog post

nasl

A parser for NASL.

Ruby

flask-logging-demo

For use in our Tenable.IO to AWS Security Hub integration

mIDA

C++

audit_files

Nessus Audit files

Security-Hub

Visual Studio Code extension for writing Terrascan Rego policies

terrascan-rego-editor

TypeScript

hidden-services-revealer

A documentation generator for NASL.

nasldoc

Ruby

cnappgoat-scenarios

This repository provides a comprehensive collection of Pulumi scenarios utilized by cnappgoat

accurics-action

The Accurics GitHub Action scans Infrastructure as Code files checked into the respository to help ensure that cloud resources are secure and compliant from creation.

A static analysis framework for NASL.

pedant

Ruby

sublimetext-nasl

Kastle

A purely functional, effectful, resource-safe, kafka library for Scala

Scala

csup

Tenable.io Container Security Uploading and Reporting Commandline Tool

microfrontend-demo-app

JavaScript

SinCity

integration-asc

Vim extensions for programming in NASL

vim-nasl

Vim Script

runterrascan.io

CSS

cloud-security-training

The golden AMI pipeline enables creation, distribution, verification, launch-compliance, and decommissioning of the golden AMI out of the box. This version of the pipeline integrates with Tenable.io for vulnerability assessments.

golden-ami-pipeline-with-tenable-sample

container-security-action

Tenable's Container security action which helps scan docker images.

cloud-security-actions

notepadpp-nasl

integration-cef

Github action to trigger WAS

was-action

entra-id-federation-abuse-research-required-roles

Templates for creating Cloud Snapshots

cloud-snapshot-automation

This app provides Splunk dashboards and reporting for Tenable PVS

splunk-app-pvs

HTML

integrations-ibm-cloudpak-for-security

Tenable.ad IOA module event logs listener

Tenable.ad-EventsLogs-Subscriber

Rust

emacs-nasl

Emacs Lisp

UncoverDCShadow

Tenable.io to Google Cloud Security Command Center Bridge

integration-cscc

tenablecs_demo

WSUSpendu

Bit Discovery REST API scripts

asm-python-examples

Scripts to integrate BitDiscovery data with Tenable

asm-asset-importer

Grammar file for Nessus KB files.

accurics-vscode

TypeScript

nasl-layer

Spacemacs layer for NASL

atom-grammar-nessuskb

CoffeeScript

accurics-orb

The Accurics CircleCI Orb scans IaC (Infrastructure as Code) to help identify vulnerabilities prior to cloud deployment.