Terraform enables you to safely and predictably create, change, and improve infrastructure. It is an open source tool that codifies APIs into declarative configuration files that can be shared amon…

A tool for secrets management, encryption as a service, and privileged access management

Consul is a distributed, highly available, and data center aware solution to connect and configure applications across dynamic, distributed infrastructure.

Cadence is a distributed, scalable, durable, and highly available orchestration engine to execute asynchronous long-running business logic in a scalable and resilient way.

A set of tools to work with the feeds (vulnerabilities, CPE dictionary etc.) distributed by National Vulnerability Database (NVD)

DNS covert channel implant for Red Teams.

Microsoft Security Guidance

Tool and documentation dumping grounds

A Linux Auditd rule set mapped to MITRE's Attack Framework

A collection of fraud related tools for research.

A survey to check if your product is HIPAA compliant.

Vendor Security Model Contract

Course materials for Modern Binary Exploitation by RPISEC

Compliance automation framework, focused on SOC2

Anki Vector Python SDK

Kinda useful notes collated together publicly

The Digital Standard is an ambitious, community-led effort to build a framework to test and rate products and services on the basis of privacy, security, and data practices.

Searches through git repositories for high entropy strings and secrets, digging deep into commit history

Linux Kernel Defence Map

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strin…

Example applications using the wolfSSL lightweight SSL/TLS library

Vulnerable Android application for developers and security enthusiasts to learn about Android insecurities

Open source offensive security platform for red team, by red team.

WebGL visualization for displaying animated traffic graphs

Checklist of the most important security countermeasures when designing, testing, and releasing your API

Official Black Hat Arsenal Security Tools Repository

Bypass Two-Factor-Authentication

Swift cross-platform crypto library using CommonCrypto/libcrypto