Search Results for "attack surface management" - Page 3
Sort By:
Showing 110 open source projects for "attack surface management"
View related business solutions-
Build Agents and Models on One PlatformGemini Enterprise Agent Platform is Google Cloud's comprehensive platform for developers to build, scale, govern, and optimize agents and models. Choose from Google's most advanced models and third-party models like Anthropic's Claude Model Family.
-
Cut Data Warehouse Costs by 54%BigQuery delivers 54% lower TCO with exabyte scale and flexible pricing. Free migration tools handle the SQL translation automatically.
-
1
Ediacaran Application
Applications with modular architecture
...For example, the storage module can enforce strict access rules so that only authorized modules (like processing) can read or write data, while external-facing modules (like ingestion or visualization) have limited permissions. This reduces the attack surface, helps prevent unauthorized access, and enables better enforcement of security policies such as authentication, authorization, and data isolation. -
2
CalcTools
A library of tools for math calculation
Java source intended to serve as a nexus for teaching both mathematics and software solutions for computation on iterative equations. Public interfaces allow a user to extend the available operator and function lists to external libraries. Currently the packaged libraries include the CERN Colt library and the Anaconda package of math libraries which include MpMath and SciPy. A user can easily extend the functionality by coding to the provided interfaces and dropping a JAR of the... -
3
Bank Vaults
K8s operator, Go client with automatic token renewal
...It has many 'blades' that cut through the security problem: the Bank-Vaults operator provides automation; a Go client with automatic token renewal that provides dynamic secret generation, multiple unseal options, and more; a CLI tool to initialize, unseal and configure Vault with authentication methods and secret engines; and direct secret injection into Pods to reduce the attack surface. Automates the entire Vault lifecycle in your Kubernetes clusters. Provides seamless integration with non-Vault-aware applications without storing the decrypted secret anywhere. Vault is the de-facto standard for secret management in cloud-native environments. Bank-Vaults provides various tools for Hashicorp Vault to make its use easier. ... -
4
Food Truck
SwiftUI sample code from WWDC22
Sample Food Truck is a comprehensive Swift sample app that demonstrates modern Apple platform patterns across data modeling, UI, and system integrations. It showcases SwiftUI-first architecture with navigation, lists, detail flows, and state management suitable for iPhone, iPad, and Mac. The project models a small business scenario—menus, orders, inventory, and analytics—so you can see realistic domain logic rather than a toy counter. It integrates with platform frameworks like Charts, widgets, and notifications to highlight how to surface insights and re-engage users. The code emphasizes testability and separation of concerns, illustrating how to structure features and preview them with sample data. ... -
Fully Managed MySQL, PostgreSQL, and SQL ServerCloud SQL handles your database ops end to end, so you can focus on your app.
-
5
CliMA Land
Everything within the Land model
CliMA Land is a next generation Land Surface Model (LSM) designed to use the broadly available remote sensing data as well as ground-based flux measurements. CliMA Land is a highly modular platform to promote research at different scales from tissue to organ, whole plant, and ecosystem. Therefore, we deliver CliMA Land via a patch of packages (also referred to as sub-modules) to reduce the time used to initialize a research project. As a result, the repository is more a collection of... -
6
Confused
Tool to check for dependency confusion vulnerabilities
A tool for checking for lingering free namespaces for private package names referenced in dependency configuration for Python (pypi) requirements.txt, JavaScript (npm) package.json, PHP (composer) composer.json or MVN (maven) pom.xml. confused simply reads through a dependency definition file of an application and checks the public package repositories for each dependency entry in that file. It will proceed to report all the package names that are not found in the public repositories - a... -
7
SandDance
Visually explore, understand, and present your data
By using easy-to-understand views, SandDance helps you find insights about your data, which in turn help you tell stories supported by data, build cases based on evidence, test hypotheses, dig deeper into surface explanations, support decisions for purchases, or relate data into a wider, real world context. SandDance uses unit visualizations, which apply a one-to-one mapping between rows in your database and marks on the screen. Smooth animated transitions between views help you to maintain... -
8
R-package to perform analysis of landmark based geometric morphometrics. Installation instructions: https://github.com/zarquon42b/Morpho/blob/master/README.md
-
9
Hakrawler
Fast Go web crawler for discovering URLs and web app endpoints
...It is primarily used during the reconnaissance phase of security testing, bug bounty hunting, and penetration testing. It works by automatically crawling web pages and extracting links, JavaScript file locations, and other resources that may reveal additional attack surface or hidden functionality. hakrawler is implemented as a simple and efficient crawler using the Gocolly library, which allows it to perform fast and concurrent crawling of web pages. It accepts URLs through standard input, making it easy to integrate into command-line pipelines with other security tools. This workflow enables researchers to combine it with subdomain enumeration, HTTP probing, and vulnerability scanning utilities to automate reconnaissance processes. hakrawler can follow links within a website and optionally include subdomains. -
Custom VMs From 1 to 96 vCPUs With 99.95% UptimeLive migration and automatic failover keep workloads online through maintenance. One free e2-micro VM every month.
-
10
OpticSim.jl
Optical Simulation software
OpticSim.jl is a Julia package for geometric optics (ray tracing) simulation and optimization of complex optical systems developed by the Microsoft Research Interactive Media Group and the Microsoft Hardware Architecture Incubation Team (HART). It is designed to allow optical engineers to create optical systems procedurally and then to simulate and optimize them. Unlike Zemax, Code V, or other interactive optical design systems OpticSim.jl has limited support for interactivity, primarily in... -
11
Kubernetes External Secrets
Integrate external secret management systems with Kubernetes
Kubernetes External Secrets allows you to use external secret management systems, like AWS Secrets Manager or HashiCorp Vault, to securely add secrets in Kubernetes. Read more about the design and motivation for Kubernetes External Secrets on the GoDaddy Engineering Blog. The community and maintainers of this project and related Kubernetes secret management projects use the #external-secrets channel on the Kubernetes slack for discussion and brainstorming. -
12
Kubesploit
Kubesploit is a cross-platform post-exploitation HTTP/2 Command
...While researching Docker and Kubernetes, we noticed that most of the tools available today are aimed at passive scanning for vulnerabilities in the cluster, and there is a lack of more complex attack vector coverage. They might allow you to see the problem but not exploit it. It is important to run the exploit to simulate a real-world attack that will be used to determine corporate resilience across the network. When running an exploit, it will practice the organization's cyber event management, which doesn't happen when scanning for cluster issues. ... -
13
AlphaPlot
Interactive scientific graphing and data analysis software.
Alpha Plot can generate different types of 2D and 3D plots (such as line, scatter, bar, pie, and surface plots) from data that is either imported from ASCII files, entered by hand, or calculated using formulas. The data is held in spreadsheets which are referred to as tables with column-based data (typically X and Y values for 2D plots) or matrices (for 3D plots). The spreadsheets as well as graphs and note windows are gathered in a project and can be organized using folders. The built-in... -
14
HiPlot
HiPlot makes understanding high dimensional data easy
HiPlot is an interactive visualization toolkit for exploring high-dimensional experiments, especially those produced during hyperparameter search or ablation studies. Its core view is a parallel-coordinates plot that lets you brush, filter, and highlight runs to spot trade-offs, correlations, and Pareto fronts at a glance. You can load results from simple CSV/JSON logs or programmatically push “experiments” with typed fields, metrics, and tags. The UI supports dynamic filtering, color... -
15
HostHunter
OSINT reconnaissance tool for discovering hostnames from IP addresses
...This approach enables users to identify hidden or additional services that may be hosted behind a single IP address. By correlating hostname information from certificates, APIs, HTTP headers, and other sources, the tool helps reveal the broader attack surface of an organization or infrastructure. HostHunter is commonly used in penetration testing, bug bounty reconnaissance, and security assessments where identifying virtual hosts is critical. HostHunter supports multiple output formats, making it easier to integrate the results into other security tools or workflows. -
16
ClimateMachine.jl
Earth System Model that automatically learns from data
The ClimateMachine is a software package that models the evolution of the Earth system over weeks to centuries. The ClimateMachine solves three-dimensional partial differential equations for the distributions of water, momentum, energy, and tracers such as carbon in the atmosphere, oceans, and on land. The ClimateMachine will harness a wide range of Earth observations and data generated computationally to predict the evolution of Earth’s climate and features such as droughts, rainfall... -
17
GPlates
Interactive visualization of plate tectonics.
GPlates is a plate-tectonics program. Manipulate reconstructions of geological and paleo-geographic features through geological time. Interactively visualize vector, raster and volume data. PyGPlates is the GPlates Python library. Get fine-grained access to GPlates functionality in your Python scripts. -
18
assetfinder
Find domains and subdomains related to a given domain
...It queries services such as certificate transparency logs, threat intelligence platforms, and passive DNS providers to build a comprehensive list of related assets. The tool is widely used in bug bounty programs and penetration testing to map an organization’s external attack surface. It supports optional filtering to return only subdomains, allowing users to focus on specific reconnaissance needs. assetfinder is lightweight and easy to use, typically requiring only a single command to produce results, making it ideal for quick enumeration tasks. Its modular design allows contributors to add new data sources, improving coverage over time. -
19
AttackSurfaceMapper
Automated tool for mapping & expanding organization’s attack surface
AttackSurfaceMapper (ASM) is a reconnaissance and attack surface discovery tool designed to automate the process of mapping potential targets within an organization's infrastructure. It combines open source intelligence (OSINT) with selective active reconnaissance techniques to expand and analyze a target’s external attack surface. Users can supply domains, subdomains, or IP addresses as input, and applies multiple discovery methods to identify additional related assets such as new subdomains, associated IP ranges, and hosts within the same network ownership. ... -
20
DNSGen
Intelligent DNS permutation tool for subdomain discovery
DNSGen is an open source DNS name permutation tool designed primarily for security researchers and penetration testers who need to discover potential subdomains during reconnaissance and attack surface mapping. It analyzes existing domain names and generates numerous intelligent variations that may represent valid subdomains within an organization’s infrastructure. These generated permutations help identify hidden or unlisted services that may not appear in standard DNS queries or public records. DNSGen applies multiple permutation techniques to create realistic domain combinations based on modern infrastructure naming patterns, including cloud environments, DevOps tools, and microservice architectures. ... -
21
AQUATONE
A tool for domain flyovers
Aquatone is a tool for visual inspection of websites across a large amount of hosts and is convenient for quickly gaining an overview of HTTP-based attack surface. Aquatone is designed to be as easy to use as possible and to integrate with your existing toolset with no or minimal glue. Aquatone is started by piping output of a command into the tool. It doesn't really care how the piped data looks as URLs, domains, and IP addresses will be extracted with regular expression pattern matching. ... -
22
GEOMS2
Geostatistics and geosciences modeling software
GEOMS2 is a geostatistics and geosciences modeling software. Provides interface for grid (mesh), point, surface and data (non-spatial) objects. It has a 3D viewer and 2D plots using the well known Python engines Mayavi and Matplotlib. It has several functions to manipulate your data as well as provide univariate and multivariate analysis. NOTE: The software is still an early beta. Please tell us if you found a bug. Download datasets for students of Geostatistics 2017 (Petroleum... -
23
Photon
Incredibly fast crawler designed for OSINT
Photon is an extremely fast web crawler built specifically for OSINT and reconnaissance use cases. It is designed to extract URLs, endpoints, files, and other intelligence artifacts from target websites with minimal overhead. The crawler prioritizes speed and breadth, making it suitable for mapping web attack surfaces and discovering hidden resources. Photon is commonly used during early reconnaissance phases to build a comprehensive inventory of reachable assets. Its Python implementation... -
24
HaLVM
The Haskell Lightweight Virtual Machine (HaLVM)
HaLVM is a Haskell-based unikernel system that lets you write entire virtual machines in Haskell and run them directly on a hypervisor, traditionally Xen. Instead of deploying a full operating system, you compile a Haskell program into a tiny image that boots as its own VM, which reduces the attack surface and startup time. The project adapts GHC and the Haskell runtime to a minimal environment, providing the I/O, networking, and memory facilities necessary for standalone services. Its design encourages highly isolated services—each VM does one job—making it attractive for security-sensitive components and research on microservice-style architectures. ... -
25
Shuttle
A web proxy in Golang with amazing features
Shuttle is a cross-platform network proxy tool based on Go.