Offensive Security Related Tooling#

Secrets Encryption#

• BlackBox
• Sops
• Git-Crypt
• Cryptotmator

Git#

• HungryFox
• Serverless RepoSupervisor
• Git HAcker -Git Source Leaks-
• Git Dorks
• Repo Security Scanner

Policies#

• Open Policy: opal
• Open Policy
• Kubernetes Open Policy
• Kuverno: kubernetes policy engine
• Kubewarden

Store Secrets#

• Env Vars in Chain

Vulnerability Databases#

• National Vulnerability Database

Cloud Vulnerabilities and Audit#

• Scout suite
• CS suite
• Prowler
• Packbot
• Hubot
• Cloud Custodian
• Threat
• AWS Inventory
• AWS Iam: clouds planning
• Audit page
• Project Discovery

Tools#

• Security Tools
• BDD sec testing tool
• God Damn SEcurity Tooling

Vulnerability scanners#

• Trivy
• Clair
• OpenVAS
• Linus
• Grypt: vulnerability scanner for container images and filesystems
• Syft: library for generating a Software Bill of Materials

Distro#

• Distributions

Compliance Tools#

• Hyperproof
• Kosli
• Hyperproff alternatives