security-tool-box/stb-red.yaml at main · ahmetak4n/security-tool-box · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
contents:
  keyring:
    - https://packages.wolfi.dev/os/wolfi-signing.rsa.pub
  repositories:
    - https://packages.wolfi.dev/os
  packages:
    # base
    - bash
    - wolfi-base
    # development
    - git
    - py3-pip
    - python3
    # sast
    - semgrep
    # sbom
    - syft
    # k8s & container security
    - grype
    - trivy
    # reconnaissance
    - nmap
    - amass
    - nuclei
    - gobuster
    - exploitdb
    # credential access
    - jwt-tool
    # exfiltration
    - sqlmap
accounts:
  groups:
    - groupname: nonroot
      gid: 65532
  users:
    - username: nonroot
      uid: 65532
  run-as: 65532
paths:
  - path: /opt/exploitdb
    type: directory
    permissions: 0o777