pwned
starbase
| pwned | starbase | |
|---|---|---|
| 1 | 5 | |
| 220 | 326 | |
| - | 1.5% | |
| 9.5 | 6.6 | |
| 7 days ago | 5 months ago | |
| TypeScript | TypeScript | |
| MIT License | Mozilla Public License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
pwned
-
Passwords have probably stopped more people getting into their own account than hackers.
If only this Troy guy would've told us how the passwords are checked. Oh, wait. He did. And if only this Troy guy would've provided an API to use in case we don't trust the site (since sites can be hacked and code can be changed). Ah, would you look at that. Now if only there weren't some developers out there that could use this API to make tools that'd check for passwords in the same way that's documented in that blog post. Like these ones or this one or other ones which I haven't searched for.
starbase
-
Security Analysis with JupiterOne’s Starbase and Memgraph
Name your app, and enter a homepage URL (in this case, you can use the JupiterOne’s Starbase repo URL), uncheck the webhook and adjust the repository permissions. The following permissions need to be set to read-only: -Repository Permissions: Actions, Environments, Issues, Pull Requests and Secrets -Organization Permissions: Administration, Members, Secrets. The rest of the permissions are No access by default.
- Graph Databases
- Democratizing graph-based security analysis – Starbase
- Democratizing graph-based security analysis - Starbase
What are some alternatives?
h8mail - Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email
cloud-pricing-api - GraphQL API for cloud pricing. Contains over 3M public prices from AWS, Azure and GCP. Self-updates prices via an automated weekly job.
cowrie - Cowrie SSH/Telnet Honeypot https://cowrie.readthedocs.io
t2d2 - Terraform Test Driven Development
buttercup-core - :tophat: The mighty NodeJS password vault
graph-github - A graph conversion tool for https://www.github.com
javascript-obfuscator - A powerful obfuscator for JavaScript and Node.js
fixinventory - Fix Inventory consolidates user, resource, and configuration data from your cloud environments into a unified, graph-based asset inventory.
envless - OpenSource, frictionless and secure way to share and manage app secrets across teams.
graph-zoom - A graph conversion tool for https://zoom.us
cartography - Cartography is a Python tool that consolidates infrastructure assets and the relationships between them in an intuitive graph view powered by a Neo4j database.
Application-Insights-Workbooks - Templates for Azure Monitor Workbooks