Open Source Security Arsenal

Digging Deeper....

The FLARE team's open-source tool to identify bilities in executable files.

The pattern matching swiss knife

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

A tool for secrets management, encryption as a service, and privileged access management

Hunt for security weaknesses in Kubernetes clusters

Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

The ZAP by Checkmarx Core project

In-depth attack surface mapping and asset discovery

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

A fast, simple, recursive content discovery tool written in Rust.