Even works with entire websites and can be extended through rules. · GitHub
Gitleaks is an open source (MIT licensed) secret scanner for git repositories, files, directories, and stdin. With over 20 million docker downloads, 19k GitHub stars, 14 million GitHub downloads, thousands of weekly clones, and over 850k homebrew installs, gitleaks is the most trusted open source secret scanner among security professionals, enterprises, and developers. Gitleaks is maintained by Zach Rice.
Encrypted, Compressed, and Deduplicated Backups Using the Cloud Storage You Pick.
Novops help manage secrets and configurations to avoid keeping them (often insecurely) in gitignored folders, forgotten on your machine and spread around CI and server configs.
pf-badhost is a fast, bi-directional network filtering utility powered by the PF firewall. pf-badhost blocks many of the internet's biggest irritants - annoyances such as SSH and SMTP bruteforcers are largely eliminated. Shodan scans and bots looking for webservers to abuse are stopped dead in their tracks. When used to filter outbound traffic, pf-badhost blocks many seedy, spooky malware containing web hosts
Continuous Integration the Light Way
Laminar helps you automate and track jobs, and presents the results in a simple and clear interface.
Laminar encourages leveraging existing tools in your Linux environment rather than reinventing the wheel.
No clicky web UIs that churn out unreadable XML, no assumptions about your source control or build system; just write a script and Laminar will execute it.
cloud-init est un outil qui permet de personnaliser une machine virtuelle, ou une instance cloud, lors de son premier démarrage. Il s'agit d'un standard qui est très largement répandu.
In the vein of infrastructure as code OctoDNS provides a set of tools & patterns that make it easy to manage your DNS records across multiple providers. The resulting config can live in a repository and be deployed just like the rest of your code, maintaining a clear history and using your existing review & workflow.
Zeek (formerly Bro) is the world’s leading platform for network security monitoring.
Yopass is created to reduce the amount of clear text passwords stored in email and chat conversations by encrypting and generating a short lived link which can only be viewed once.
Pour résumer en quelques mots un bastion vous permet de sécuriser l’accès à vos serveur, il est plus qu’une simple passerelle SSH, il permet de bénéficier de nombreuses fonctionnalités, que je vais vous détailler dans le billet suivant, si vous voulez voir une solution alternative il existe aussi celle d’HashiCorp.
Croc est un petit logiciel en Go donc sans dépendances (fusil de Tchekhov) qui tourne sur un peu tous les OS du bien (Linux, Linux et aussi Linux entre autres, même s'il parait qu'il tourne aussi sur des OS moins biens).
Il sert tout simplement à s'échanger des fichiers entre deux machines. Il le faut donc des deux côtés : chez l'émetteur et chez le récepteur.