Skip to content
#

security-tools

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

Here are 1,807 public repositories matching this topic...

gitleaks
jonny-wg2
jonny-wg2 commented Jun 15, 2020

Is your feature request related to a problem? Please describe.
I would like to be able to whitelist a commit within the rule. Furthermore, I would like the ability to have multiple whitelists for commits so I can add more descriptive tags from which repo the commit lives etc.

Describe the solution you'd like

[[rules]]
	description = "AWS Secret Key"
	regex = '''(?i)aws(.{0,20}
sarcasticmonkeys
sarcasticmonkeys commented Sep 8, 2020

If you call fuzz on a layer that contains a PacketField, that fuzz does not recurse down into a PacketField within the layer

class Foo(Packet):
    name='Foo'
    fields_desc=[
        int64("bar"),
    ]
    def extract_padding(self, s):
        return b'', s
        
class demo(Packet):
    name="demo"
    fields_desc = [ PacketField(name="foo",default=Foo(),cls=Foo)]
inst
ar1em
ar1em commented Sep 23, 2020

Hi, Trivy team
I use Trivy to scan centos:7 based image. However, I get many false positives in result.

Trivy version: 0.11.0
Base image: centos:7 (centos 7.8.2003)
Trivy command: trivy --timeout 5m0s --vuln-type os -f json -q $image-name

Click to toggle contents of 'Dockerfile'
FROM centos:7
RUN yum upgrade -y

RUN yum install -y \
        https:

Prowler is a security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains all CIS controls listed here https://d0.awsstatic.com/whitepapers/compliance/AWS_CIS_Foundations_Benchmark.pdf and more than 100 additional checks that help on GDPR, HIPAA and other security requirements.

  • Updated Oct 8, 2020
  • Shell
RustScan
bee-san
bee-san commented Oct 4, 2020

Problem

We want to benchmark RustScan with https://github.com/sharkdp/hyperfine and store the results in Google Sheets.

We want this program (written in whatever language you want, but preferably Python) to run on a new tag release.

You can do this using either GitHub actions or Travis CI.

What the program should do

  1. Download & install HyperFine (this can be done in the CI)
analyserdmz
analyserdmz commented May 7, 2020

Would be awesome if it would be possible to save the found streams to a M3U file, compatible with VLC. An example template of a valid M3U file is the following:

#EXTM3U
#EXTINF:-1 tvg-id="" tvg-name="" tvg-language="" tvg-logo="" tvg-country="" tvg-url="" group-title="",[IP AND CHANNELID HERE FOR NAME]
rtsp://192.168.0.5/route/to/stream/here

#EXTINF:-1 tvg-id="" tvg-name="" tvg-langua
certificates
EmiiKhaos
EmiiKhaos commented Jul 16, 2020

What would you like to be added

Add support for a DynamoDB storage backend. Although MySQL is available, it would require to run a RDS Instance for it. Extra costs, backup considerations, etc. Even with Aurora Serverless.

DynamoDB is just there, scales as needed with OnDemand pricing and has fine backup capabilities.

Why this is needed

We plan to run step-ca in AWS ECS on Farga

大型内网渗透扫描器&Cobalt Strike,Ladon7.2内置94个模块,包含信息收集/存活主机/IP扫描/端口扫描/服务识别/网络资产/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010、SMBGhost、Weblogic、ActiveMQ、Tomcat、Struts2系列,密码口令爆破(Mysql、Oracle、MSSQL)、FTP、SSH(Linux)、VNC、Windows(IPC、WMI、SMB、Netbios、LDAP、SmbHash、WmiHash、Winrm),远程执行命令(wmiexe/psexec/atexec/sshexec/webshell),降权提权Runas、GetSystem,Poc/Exploit,支持Cobalt Strike 3.X-4.0

  • Updated Sep 15, 2020
  • C#
Wikipedia
Wikipedia
You can’t perform that action at this time.