nuvola (with the lowercase n) is a tool to dump and perform automatic and manual security analysis on AWS environments …
Cicd-Goat – A Deliberately Vulnerable CI/CD Environment
Deliberately vulnerable CI/CD environment. Hack CI/CD pipelines, capture the flags. Created by Cider Security. Description The CI/CD Goat project allows …
secureCodeBox (SCB) – Continuous Secure Delivery Out Of The Box
secureCodeBox is a kubernetes based, modularized toolchain for continuous security scans of your software project. Its goal is to orchestrate …
Wrongsecrets – Examples With How To Not Use Secrets
Welcome to the OWASP WrongSecrets p0wnable app. With this app, we have packed various ways of how to not store …
Whispers – Identify Hardcoded Secrets In Static Structured Text
“My little birds are everywhere, even in the North, they whisper to me the strangest stories.” – Lord Varys Whispers …
Vimana – An Experimental Security Framework That Aims To Provide Resources For Auditing Python Web Applications
Vimana is a modular security framework designed to audit Python web applications. The base of the Vimana is composed of …
APICheck – The DevSecOps Toolset For REST APIs
APICheck is a complete toolset designed and created for testing REST APIs. Why APICheck APICheck focuses not only in the …