Deploying a web application on AWS using Serverless Services

Comprehensive walkthrough for transitioning a legacy app from on-premises to the cloud, emphasizing modernization and serverless platforms, with integrated DevOps practices:

A serverless movies API that pulls movie data from obdbapi and displays it in the command line

Implementing the Terraform core workflow in Collaboration, via Github Pull Requests, Actions, Bot, Environments & a Remote Backend. In this project I create an end-to-end IaC solution for deploying…

At the end of this Guided hands-on blog, you should be able to Install pacu and examine IAM policies via AWS CLI, identify users with excessive permissions, and understand how threat actors can lev…

A curated list of awesome references collected since 2018.

A list of interesting open-source security tools, mostly reviewed and commented by me.

JavaScript API for Chrome and Firefox

Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits.

The ultimate solution for remotely deploying Crowdstrike sensors quickly and discreetly on any other EDR platform.

A community contributed consolidated list of InfoSec meetups in the Asia Pacific region.

Free hands-on digital forensics labs for students and faculty

This tool extracts and displays data from the Recall feature in Windows 11, providing an easy way to access information about your PC's activity snapshots.

VirtualGHOST Detection Tool

Hands-on projects on Static and Dynamic malware analysis with real-world tools.

Dirty PoC on how to abuse S1's VEH for Vectored Syscalls and Local Execution

This is for sharing resources for the Nearshore Cyber threat hunting group.

🌊 Modern swell buoy charts + Aggregated surf forecast from Surfline & Spitcast APIs

This repo is where I store my Threat Hunting ideas/content

Notes for red teamers - from cloud to Active Directory to many things in between.

Python-based utility that uses supervised machine learning to detect phishing domains from the Certificate Transparency log network.

AppSec Ezine Public Repository.

note taking at lightning speeds

My eBook with tips on how to get started in industrial (ICS/OT) cyber security.

Notes, research, and methodologies for becoming a better hacker. Knowledge should be free.

Homebridge plugin that exposes Apple TVs with features that should be native to Apple HomeKit.