SyCode7
SyCode7
/ MITRE ATT&CK Cloud Matrix & ATLAS
Created
July 21, 2024 19:05
MITRE ATT&CK Cloud Matrix & MITRE ATLAS
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "name": "ATLAS Matrix", | |
| "versions": { | |
| "attack": "4", | |
| "navigator": "4.6.4", | |
| "layer": "4.3" | |
| }, | |
| "domain": "atlas-atlas", | |
| "description": "Adversarial Threat Landscape for Artificial-Intelligence Systems, see atlas.mitre.org", | |
| "filters": { |
SyCode7
/ nist_800_53_overview.json
Last active
April 18, 2024 23:32
MITRE ATT&CK Mappings to NIST 800-53 for AWS
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "name": "nist_800_53 overview", | |
| "versions": { | |
| "attack": "14", | |
| "navigator": "4.9.4", | |
| "layer": "4.5" | |
| }, | |
| "domain": "enterprise-attack", | |
| "description": "nist_800_53 heatmap overview of nist_800_53 mappings, scores are the number of associated entries", | |
| "filters": { |
SyCode7
/ scattered_spider_(g1015).json
Created
February 21, 2024 17:12
scattered_spider threat group
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "name": "Scattered Spider (G1015)", | |
| "versions": { | |
| "attack": "14", | |
| "navigator": "4.9.1", | |
| "layer": "4.5" | |
| }, | |
| "domain": "enterprise-attack", | |
| "description": "Enterprise techniques used by Scattered Spider, ATT&CK group G1015 (v1.0)", | |
| "filters": { |
SyCode7
/ gpt.py
Created
February 5, 2023 16:07
— forked from ustayready/gpt.py
CloudGPT - Use ChatGPT to analyze AWS policies for vulnerabilities
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| import openai | |
| import boto3 | |
| import json | |
| import time | |
| from typing import Dict, List | |
| openai.api_key = '### SET YOUR OPENAPI API KEY HERE ###' | |
| session = boto3.session.Session() | |
| client = session.client('iam') |
SyCode7
/ GCSBucketPolicyChecker
Created
July 1, 2019 16:23
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| String bucketName = "company-block-log-fce65e82-a0cd-4f71-8693-381100d93c18"; | |
| Policy p = Cache.GCSStorage.getIamPolicy(bucketName); | |
| System.out.println(p); | |
| List<Role> roleList = new ArrayList<>(); | |
| List<Set<Identity>> identities = new ArrayList<>(); | |
| // Print Roles and its identities | |
| Set<Identity> wrongIdentities = new HashSet<Identity>(); | |
| Role roler = null; | |
| Map<Role, Set<Identity>> policyBindings = p.getBindings(); |
SyCode7
/ ReportCollector
Created
January 18, 2018 12:23
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| public class ReportCollector { | |
| public static void main(String[] args) throws JsonParseException, JsonMappingException, IOException { | |
| // ArrayList | |
| Layers layers = new Layers(); | |
| Layer layer = new Layer(); | |
| // List<Layers> de.security.reports.ScanReport.getLayers() | |
| File reportFile = new File("reports/json/analysis-postgres-latest.json"); |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| package de.security.reports; | |
| import java.io.Serializable; | |
| import java.util.List; | |
| import com.fasterxml.jackson.annotation.JsonInclude; | |
| import com.fasterxml.jackson.annotation.JsonProperty; | |
| import com.fasterxml.jackson.annotation.JsonPropertyOrder; | |
| @JsonInclude(JsonInclude.Include.NON_NULL) | |
| @JsonPropertyOrder({ |