mirror of
https://github.com/autistic-symposium/sec-pentesting-toolkit.git
synced 2025-05-01 22:36:05 -04:00
| .. | ||
| intro_heroku.md | ||
| README.md | ||
Cloud and K8s Hacking
CI/CD pipelines
- Static code security analyzers: SonarQube (Javascript scanner), NodeJsScan.
- Package dependency security analyzers: Snyk.
- Docker image security analyzers: Hadolint, Clair, Anchore.
- AWS IAM permission analyzers: IAM access advisor APIs.
- PMapper.
- AWS S3 permission analyzers: s3audit.
- Docker runtime anomaly detection: Falco.
- Kubernetes policy security analyzers: RBAC.
- Policy auditing tools: Rakkess.