The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning. Learn more →
Top 20 Python security-automation Projects
-
-
-
WorkOS
The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
-
-
-
fixinventory
Fix Inventory consolidates user, resource, and configuration data from your cloud environments into a unified, graph-based asset inventory.
-
-
InfluxDB
Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
-
cve-bin-tool
The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 200 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.
-
-
-
betterscan-ce
Code Scanning/SAST/Static Analysis/Linting using many tools/Scanners + OpenAI GPT with One Report (Code, IaC) - Betterscan Community Edition (CE)
-
-
kestrel-lang
Kestrel threat hunting language: building reusable, composable, and shareable huntflows across different data sources and threat intel.
-
xssmap
Intelligent XSS detection tool that uses human techniques for looking for reflected cross-site scripting (XSS) vulnerabilities
-
-
CyberSecurityAuditScript
Security audit script decreases info gathering from average of 5 minutes, to 20 seconds, and returns everything into a textfile.
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
Also, for the attack emulation part you might be interested in CALDERA.
Project mention: Show HN: Fix – An open source cloud asset inventory for cloud security engineers | news.ycombinator.com | 2024-03-27The reasoning is explained in the very section of our Github org README you quoted this sentence from. Our main open source project is Fix Inventory (https://github.com/someengineering/fixinventory) and that is very well documented (https://inventory.fix.security) and uses no commercial 3rd party libraries.
The Fix SaaS frontend that you're referring to and that you find at https://fix.security builds upon Fix Inventory. We could have just made it closed-source like every other SaaS (think Grafana Cloud). But because I'm a big proponent of OSS we decided to open source our entire SaaS stack, frontend, backend as well as all internal tooling. The main intend here is transparency, not so you spin up your own SaaS environment.
Essentially we develop the SaaS for ourselves first and foremost, but saw no reason to make it closed source. So that is why it might be using any number of commercial 3rd party add-ons.
> I'm curious to know what Material UI provided that any other open-source UI library did not.
I believe it was some MUI X table features like multi row sorting that we didn't feel like re-implementing. I'm sure there's other open source libs that would do that, but we've settled on MUI and are not going to start mixing different UI libraries for different visual elements if we don't absolutely have to.
I was part of a project that did some analysis of OpenWRT firmware at scale. It was a lot of fun. The firmware is ( obviously ) publicly available. If you're interested in finding some cool results, you should try out FACT:
https://github.com/fkie-cad/FACT_core
It's a super neat tool that does lots of interesting things.
You want Turbinia and DFTimewolf. Literally the tools built by the DF team at Google (the same team that makes L2T) purpose-built to do exactly what you're asking.
Let's take a look at an example. We assume that we want to create an environment to automate several tools, including xira. The contents of the directory holding our scripts:
NOTE:
The open source projects on this list are ordered by number of github stars.
The number of mentions indicates repo mentiontions in the last 12 Months or
since we started tracking (Dec 2020).
Python security-automation related posts
- Diving into Starlink's User Terminal Firmware
- SOC Malware/Detection lab
- Security Audit Scan
- Automated penetration testing software?
- Kaseya Acquired Vonahi Security
- Endpoint Attack Simulation
- Do you know the Mitre tool "Caldera"? How can I build a plugin for it?
-
A note from our sponsor - WorkOS
workos.com | 25 Apr 2024
Index
What are some of the best open-source security-automation projects in Python? This list will help you:
| Project | Stars | |
|---|---|---|
| 1 | monkey | 6,483 |
| 2 | caldera | 5,175 |
| 3 | faraday | 4,600 |
| 4 | Astra | 2,424 |
| 5 | fixinventory | 1,533 |
| 6 | Sooty | 1,282 |
| 7 | FACT_core | 1,156 |
| 8 | cve-bin-tool | 1,061 |
| 9 | APTRS | 770 |
| 10 | trailscraper | 762 |
| 11 | turbinia | 711 |
| 12 | betterscan-ce | 683 |
| 13 | theo | 338 |
| 14 | embark | 291 |
| 15 | kestrel-lang | 273 |
| 16 | xssmap | 139 |
| 17 | flake8-bandit | 111 |
| 18 | faraday_plugins | 45 |
| 19 | CyberSecurityAuditScript | 9 |
| 20 | autowpscan | 2 |
Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com