Repositories list

• TicTaaC

  Public
  Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. Sugar-Free and Secure: no any external dependencies except for chart plotting are used

  Java

  •

  Apache License 2.0

  •16•0•0•0•Updated May 14, 2022May 14, 2022

• aws-threat-modeling-tool-template

  Public
  9•16•1•0•Updated Feb 16, 2022Feb 16, 2022

• zap-extensions

  Public
  OWASP ZAP Add-ons

  Java

  •

  Apache License 2.0

  •705•0•0•0•Updated Jul 12, 2021Jul 12, 2021

• ecb-encryption-research

  Public
  Simple demonstration of ECB encryption problem

  Java

  •0•0•0•1•Updated Jun 7, 2021Jun 7, 2021

• aes-cbc-security-research

  Public
  Tampering and padding oracle attacks demonstration for AES CBC encryption

  Java

  •0•0•0•1•Updated Jun 7, 2021Jun 7, 2021

• devsecops-lab

  Public
  Demo files

  41•1•0•0•Updated Jul 26, 2020Jul 26, 2020

• nginx-baseline

  Public
  Nginx Security Baseline Assessment - InSpec Profile - CIS Benchmark verification

  nginxsecurityinspec+ 4hardeninginspec-profilenginx-securitycis-benchmark

  Ruby

  •

  Apache License 2.0

  •2•4•0•0•Updated Jun 14, 2020Jun 14, 2020

• spring-boot-inspec

  Public
  Spring Boot Security Baseline Assessment InSpec Profile

  spring-bootinspec-profileinspec+ 1spring-boot-inspec

  Ruby

  •

  Apache License 2.0

  •1•0•0•0•Updated Jun 12, 2020Jun 12, 2020

• inspec-vault

  Public
  Chef InSpec profile for HashiCorp Vault

  Ruby

  •

  Apache License 2.0

  •3•0•0•0•Updated Jun 5, 2020Jun 5, 2020

• docker-registry-security-assessment

  Public
  InSpec Profile for Private Docker Registry Security Assessment

  Ruby

  •

  Apache License 2.0

  •0•0•0•0•Updated Jun 1, 2020Jun 1, 2020

• postgres-baseline

  Public
  PostgreSQL Security Baseline Assessment - InSpec Profile - CIS Benchmark controls, secure defaults and HashiCorp Vault integration

  securitypostgrespostgresql+ 5inspechardeninginspec-profilecis-benchmarksecurity-assesment

  Ruby

  •

  Apache License 2.0

  •2•4•0•0•Updated May 28, 2020May 28, 2020

• hashicorp-vault-use-cases

  Public
  Use cases and examples of Hashicorp Vault

  Shell

  •0•0•0•0•Updated Nov 15, 2019Nov 15, 2019

• threat-modeling

  Public
  Threat models hub

  HTML

  •0•1•0•0•Updated Nov 22, 2018Nov 22, 2018

• b-blockchain

  Public
  Blockchain based on STB algorithms

  Java

  •0•0•0•0•Updated May 22, 2018May 22, 2018

• gnuk-portable-pcb

  Public
  Portable GNUK token design

  1•0•0•0•Updated May 20, 2018May 20, 2018

• SodiumJCE

  Public
  Java Cryptography Extension for libsodium

  javacryptographylibsodium+ 2jcejava-cryptography-extension

  Java

  •

  ISC License

  •7•0•0•0•Updated May 20, 2018May 20, 2018

• capicom-wrapper-examples

  Public
  Examples of usage capicom-wrapper project

  Java

  •0•0•0•0•Updated May 14, 2018May 14, 2018

• php-web-security

  Public
  PHP web security solutions and examples

  PHP

  •0•1•0•0•Updated May 14, 2018May 14, 2018

• java-web-security

  Public
  Java web defence research platform

  Java

  •0•0•0•0•Updated May 14, 2018May 14, 2018

• secure-account-recovery

  Public
  Secure account recovery demonstration with timing attack protection and email signing and encryption

  javasecurityspring-boot+ 7timing-attacksspring-boot-securityemail-encryptionaccount-recoveryemail-signaturesaccount-recovery-securitytiming-attack-protection

  Java

  •1•0•0•0•Updated May 14, 2018May 14, 2018

• jks-converter

  Public
  SSL private key to java keystore converter script

  Groovy

  •0•0•0•0•Updated Apr 28, 2018Apr 28, 2018

• capicom-wrapper

  Public
  Java wrapper for Microsoft capicom library (CSP)

  javawindowsencryption+ 8digital-signaturesignature-verificationcrypto-providerscerificatesjava-wrappercapicomcapicom-wrapper+ 1

  Java

  •0•3•0•0•Updated Mar 30, 2018Mar 30, 2018