Based on Lightspin proprietary data, research, and our tracking of cloud security trends in the market, our research team has compiled a list of the 2022 Top 7 Cloud Attack Paths across AWS, Azure, GCP, and Kubernetes as seen on the Lightspin Cloud Native Application Protection Platform.

A knowledge source about TTPs used to target GenAI-based systems, copilots and agents

GyoiThon is a growing penetration test tool using Machine Learning.

Technical Documentation

A Tool for Semantic Ranking for Automated Adversarial Technique Annotation in Security Text

Pentesting checklists for various engagements

A Python script to generate MITRE ATT&CK Navigator layers from TTPs

ttpnav is a Python library that simplifies navigating MITRE ATT&CK data, enabling users to effortlessly retrieve comprehensive information about specific techniques with a single query. It provides details on mitigations, detections, procedure examples, groups, and related software/tools, streamlining cybersecurity analysis.

AWS Security Best Practices Assessment, Auditing, Hardening and Forensics Readiness Tool. It follows guidelines of the CIS Amazon Web Services Foundations Benchmark and additional checks. Official CIS for AWS guide: https://d0.awsstatic.com/whitepapers/compliance/AWS_CIS_Foundations_Benchmark.pdf

Curated list of resources related to serverless architectures and the Serverless Framework

An Android app that lets you use your card cloning devices in the field.

A Ruby framework designed to aid in the penetration testing of WordPress systems.

CSHARP DCOM Fun

Trabajo integrador de TTPS Ruby 2016. Facultad de Informática, UNLP.

[Ruby on Rails 6.1.1] - Trabajo Práctico Integrador - Taller de Tecnologías de Producción de Software - Opción Ruby (2020) | UNLP Informática (3º año)