Toni de la Fuente

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

A curated, regularly updated directory of open source security tools for AWS organized by category, defensive, offensive, auditing, forensics, with live GitHub activity badges so you can check if each tool is still maintained.

Materials used and mentioned during my talk at SANS Cloud Security Summit 2018 in San Diego

Alfresco BART is a tool written in shell script on top of Duplicity to do Alfresco backups and restore from a local file system, FTP, SCP or Amazon S3.

Tools for AWS forensics

MFA Authenticator for the command line

Creates a CloudFormation stack for running Security Monkey

Scripts for AWS amusement...

Shell script to update an AWS Security Group (VPC) with your public IP

Materials used and mentioned during my talk at RootedCON 2017

An AWS tool to help you create a point in time assessment of your AWS account using Prowler and Scout as well as optional AWS developed ransomware checks.

A curated list of resources for learning about application security

for AWS Security material

A curated list of tools for incident response

phpRADmin is a web tool written in PHP to allow configuration, administration and provisioning of RADIUS server (FreeRADIUS), clients (NAS, AP, etc) and users (PPP, PPPoE, EAP, etc) with MySQL as backend.

AWS Security Tools (AST) in a simple Docker container. :package:

Nagios/Icinga Java plugin to check via JMX values to Alfresco One 3.2 and newer. Exported from code.google.com/p/alfresco-nagios-and-icinga-plugin

Assessing compliance of a container

Lightning talk ppt I used for my presentation about 10 security concept you must know, based on Game of Thrones

Open source demos, concept and guidance related to the AWS CIS Foundation framework.

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

A node.js application to plays Iron Maiden - The Trooper whoever presses your Amazon Dash button.

Hacking from your phone

:whale: A curated list of Docker resources and projects

Script to help get MFA credentials for AWS CLI tools

DVD embedded Kickstart for CentOS 7 utilizing SCAP Security Guide (SSG) as a hardening script.

This is a cookbook for installing alfresco using multiple deployment schemas and platforms

AWS Quick Start Team

Materials used and mentioned during my talk at BSides Augusta 2017

Slide deck for my talk about Alfresco Backup and DR (and HA architectures)

Best Practice Auditd Configuration

Public tables and other research that can accept PRs. Please visit the web link.

Lynis - Security auditing tool and assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Works on Linux, Mac OS, and Unix based systems, with installation being optional.

A build automation tool that provides a modular, configurable and extensible way to install an Alfresco architecture

AWS Cloud Formation Template for Alfresco One Reference Architecture deployment using chef-alfresco (https://github.com/Alfresco/chef-alfresco), valid for any AWS Region except GovCloud and China

Remote Memory Acquisition Tool

Security Monkey

Tool to use Okta to generate temporary credentials to be used by AWS CLI

No description.

Development repository for Opscode Cookbook iptables

Some useful Vagrant samples

No description.

Wazuh RESTful API

OSSEC Wazuh documentation

Python installable command line utiltity for mitigation of host and key compromises.

Packer configuration for building a custom EKS AMI

AWS deployment for Alfresco Content Services (Enterprise). Using CFN and helm charts.

No description.

Diagrams for AWS

People Improvement Cambodia - scripts and doc written during my volunteering

The open source version of the Amazon EC2 User Guide for Linux. To submit feedback or requests for changes, submit an issue or make changes and submit a pull request.

No description.

No description.

Tools and blogs I use to perform GCP red teams

🍻 Default formulae for the missing package manager for macOS (or Linux)

Official Black Hat Arsenal Security Tools Repository

No description.