From bf052764637c271c08491c81b1b3f05b6dd488ae Mon Sep 17 00:00:00 2001 From: atharvax28 Date: Mon, 7 Sep 2026 09:26:34 +0530 Subject: [PATCH] Add modern security tooling: secrets scanning, IaC/k8s scanners, recon, AD/red-team Adds gitleaks, trufflehog, Semgrep, checkov, tfsec, kube-bench, kube-hunter, falco, gatekeeper, nuclei, httpx, ffuf, BloodHound, Sliver, and HackTricks to their matching existing subsections (Containers/Orchestration > Security, Hacking/Penetration Testing > Pentesters arsenal tools and Pentests bookmarks collection). All were checked against the current README and are genuinely absent; every URL was verified to return HTTP 200 before adding. Signed-off-by: atharvax28 --- README.md | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/README.md b/README.md index 2c1b9e4..680649d 100644 --- a/README.md +++ b/README.md @@ -812,6 +812,12 @@ performance of any of your sites from across the globe.
   trivy - vulnerability scanner for containers, suitable for CI.
   Harbor - cloud native registry project that stores, signs, and scans content.
   Houdini - hundreds of offensive and useful docker images for network intrusion.
+   checkov - static code analysis tool for scanning infrastructure as code files for misconfigurations.
+   tfsec - security scanner for your Terraform code.
+   kube-bench - checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark.
+   kube-hunter - hunts for security weaknesses in Kubernetes clusters.
+   falco - cloud native runtime security tool for Linux operating systems, detects abnormal behavior in containers.
+   gatekeeper - policy controller for Kubernetes that enforces custom resource policies using Open Policy Agent.

##### :black_small_square: Manuals/Tutorials/Best Practices @@ -1289,6 +1295,14 @@ CyberTalks - talks, interviews, and article about cybersecurity.
   mimikatz - a little tool to play with Windows security.
   sherlock - hunt down social media accounts by username across social networks.
   OWASP Threat Dragon - is a tool used to create threat model diagrams and to record possible threats.
+   gitleaks - detects and prevents secrets like passwords and API keys from leaking into git repositories.
+   trufflehog - finds, verifies, and analyzes leaked credentials across git history, filesystems and cloud storage.
+   Semgrep - fast, open-source, static analysis engine for finding bugs and enforcing code standards.
+   nuclei - fast and customisable vulnerability scanner based on simple YAML based DSL.
+   httpx - fast and multi-purpose HTTP toolkit that allows running multiple probes.
+   ffuf - fast web fuzzer written in Go, used for content discovery and parameter fuzzing.
+   BloodHound - uses graph theory to reveal the hidden and often unintended relationships within an Active Directory or Azure environment.
+   Sliver - open source cross-platform adversary emulation/red team framework.

##### :black_small_square: Pentests bookmarks collection @@ -1316,6 +1330,7 @@ CyberTalks - talks, interviews, and article about cybersecurity.
   Beginner-Network-Pentesting - notes for beginner network pentesting course.
   OSCPRepo - is a list of resources that author have been gathering in preparation for the OSCP.
   PayloadsAllTheThings - a list of useful payloads and bypass for Web Application Security and Pentest/CTF.
+   HackTricks - place to learn about hacking tricks, techniques and CTF/pentest methodology for every kind of environment.
   payloads - git all the Payloads! A collection of web attack payloads.
   command-injection-payload-list - command injection payload list.
   Awesome Shodan Search Queries - great search queries to plug into Shodan.