Based on Lightspin proprietary data, research, and our tracking of cloud security trends in the market, our research team has compiled a list of the 2022 Top 7 Cloud Attack Paths across AWS, Azure, GCP, and Kubernetes as seen on the Lightspin Cloud Native Application Protection Platform.

GyoiThon is a growing penetration test tool using Machine Learning.

Pentesting checklists for various engagements

Technical Documentation

A Python script to generate MITRE ATT&CK Navigator layers from TTPs

AWS Security Best Practices Assessment, Auditing, Hardening and Forensics Readiness Tool. It follows guidelines of the CIS Amazon Web Services Foundations Benchmark and additional checks. Official CIS for AWS guide: https://d0.awsstatic.com/whitepapers/compliance/AWS_CIS_Foundations_Benchmark.pdf

A Ruby framework designed to aid in the penetration testing of WordPress systems.

An Android app that lets you use your card cloning devices in the field.

CSHARP DCOM Fun

Curated list of resources related to serverless architectures and the Serverless Framework

ttpnav is a Python library that simplifies navigating MITRE ATT&CK data, enabling users to effortlessly retrieve comprehensive information about specific techniques with a single query. It provides details on mitigations, detections, procedure examples, groups, and related software/tools, streamlining cybersecurity analysis.

Trabajo integrador de TTPS Ruby 2016. Facultad de Informática, UNLP.

[Ruby on Rails 6.1.1] - Trabajo Práctico Integrador - Taller de Tecnologías de Producción de Software - Opción Ruby (2020) | UNLP Informática (3º año)