public blog

Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readines…

PacBot (Policy as Code Bot)

Guard offers a policy-as-code domain-specific language (DSL) to write rules and validate JSON- and YAML-formatted data such as CloudFormation Templates, K8s configurations, and Terraform JSON plans…

Generate CloudFormation / Terraform / Troposphere templates from your existing AWS resources.

Docker build script for Arch Linux base with Deluge, Privoxy and OpenVPN

Insults the user when typing wrong command

interact with Amazon Detective in multiple accounts and regions

A graph-based tool for visualizing effective access and resource relationships in AWS environments.

A collection of AWS penetration testing junk

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

barq: The AWS Cloud Post Exploitation framework!

AWS Identity and Access Management Visualizer and Anomaly Finder

☕️ Automatically show a cheat sheet or notes for any command focused in tmux. e.i. Show vim, zsh, tmux notes/key-combos in a pane automatically while you're using them.

Homebrew Tap - Pen Test Tools

Page File analysis tools.

A curated list of awesome YARA rules, tools, and people.

Package manager for Chrome OS

CLI tool for generating Terraform configuration and state for existing CloudFormation resources

Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.

Re-play Security Events

This script is used to generate some basic detections of the aws security services

Personalized, user-focused recommendations for employee information security.

People tracker on the Internet: OSINT analysis and research tool by Jose Pino

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

proxychains ng (new generation) - a preloader which hooks calls to sockets in dynamically linked programs and redirects it through one or more socks/http proxies. continuation of the unmaintained p…

This repository can be used to generate and evaluate findings detected by Amazon GuardDuty

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

A Linux Auditd rule set mapped to MITRE's Attack Framework