Git-Mirrors/sec-pentesting-toolkit

mirror of https://github.com/autistic-symposium/sec-pentesting-toolkit.git synced 2025-05-19 07:00:25 -04:00

History

writer 35788d79e2 add the stuff floating from other machines		2024-10-15 10:13:30 +09:00
..
intro_heroku.md	add the stuff floating from other machines	2024-10-15 10:13:30 +09:00
README.md	add the stuff floating from other machines	2024-10-15 10:13:30 +09:00

README.md

Cloud and K8s Hacking

CI/CD pipelines

Static code security analyzers: SonarQube (Javascript scanner), NodeJsScan.
Package dependency security analyzers: Snyk.
Docker image security analyzers: Hadolint, Clair, Anchore.
AWS IAM permission analyzers: IAM access advisor APIs.
PMapper.
AWS S3 permission analyzers: s3audit.
Docker runtime anomaly detection: Falco.
Kubernetes policy security analyzers: RBAC.
Policy auditing tools: Rakkess.