I'm Anas Elgaili, an aspiring cybersecurity analyst building open-source Python cybersecurity tools, security automation and scoped penetration-testing utilities for authorized assessments.
Security project directory · Penetration-testing programs · Tests and practical limits · Sponsor open-source development
أنا أنس، أطوّر أدوات Python مفتوحة المصدر للأمن السيبراني والأتمتة واختبار الاختراق المصرّح به. اختر المشروع المناسب من الدليل أدناه، وابدأ بالأمثلة التجريبية قبل تقييمه على بيئتك.
This portfolio includes 20 independently runnable Python security projects covering IAM access reviews, cloud security posture, network segmentation, TLS monitoring, DevSecOps, endpoint baselines and incident response planning.
Each project includes a documented input contract, configurable policies, synthetic examples, automated tests, and JSON, SARIF 2.1.0 and Markdown reports. The implementations use the Python standard library.
Ten projects have standalone repositories. Ten are organized as independent projects in the Enterprise Python Cybersecurity Toolkit.
| Your goal | Start here |
|---|---|
| Try a web, API or network assessment | Run the Enterprise Pentest Suite offline demos. |
| Review a Kubernetes configuration export | Run the Python Cybersecurity Toolkit example. |
| Review cloud permissions or software dependencies | Explore IAM access-review tools and software supply-chain security tools. |
| Organize local files with a preview | Try Python Automation Workbench. |
Enterprise Pentest Suite provides 10 separately runnable assessment programs with explicit scopes, bounded live requests, redacted JSON/SARIF/Markdown reports and observed retest tracking.
Programs cover web posture, CORS, API authorization canaries, unintended artifact exposure, TCP reachability, verified TLS, pre-authentication SSH offers, DNS policies, OpenID Connect metadata and local JWT review. Source includes synthetic examples, tests and documented limitations. This initial suite supports selected tasks in an authorized assessment; it requires company-specific evaluation.
| Project | What it helps review |
|---|---|
| Identity Access Review | Review normalized identity and group exports; explain inherited business and administrative permissions. |
| Cloud IAM Policy Auditor | Statically inspect exported IAM JSON before a reviewer approves access changes. |
| Cloud Storage Exposure Audit | Review a normalized storage inventory and prioritize exposure using data classification. |
| Project | What it helps review |
|---|---|
| Network Segmentation Auditor | Test a proposed ordered firewall policy against explicit expected traffic decisions. |
| TLS Certificate Auditor | Review exported certificate inventory or connect to explicitly listed authorized TLS endpoints. |
| Backup Restore Verifier | Verify an exported backup manifest against a local snapshot before a recovery exercise. |
| Linux Hardening Auditor | Review captured Linux configuration text and permission metadata against a documented baseline. |
| Windows Security Baseline Auditor | Evaluate a normalized endpoint control export and report missing, disabled or unknown protections. |
| Security Configuration Drift | Compare two reviewed configuration snapshots and prioritize changed security-relevant paths. |
| Project | What it helps review |
|---|---|
| Software Supply Chain Auditor | Trace vulnerable dependencies from an application through a CycloneDX dependency graph. |
| Secrets Exposure Scanner | Detect likely credential material in a repository without printing matched secret values. |
| Container Security Auditor | Review Dockerfile text before merging an application container build. |
| Kubernetes Manifest Guard | Review exported Kubernetes JSON resources and explain effective pod/container security-context gaps. |
| Project | What it helps review |
|---|---|
| Vulnerability Prioritizer | Produce a reproducible patch queue from normalized vulnerability and asset exports. |
| Ransomware Canary Detector | Correlate exported filesystem events and canary touches into host-level triage findings. |
| API Access Log Detector | Triage normalized request logs into explainable client and route activity findings. |
| Audit Log Integrity Ledger | Verify a log export against a protected signing key and an independently stored final-head anchor. |
| Phishing Email Triage | Analyze bounded MIME email content without opening attachments or following links. |
| Threat Intelligence Matcher | Match normalized observations against a maintained local indicator dataset. |
| Incident Response Orchestrator | Validate a declarative incident playbook and generate an auditable local response plan. |
The initial release passes 269 automated tests locally. Synthetic SARIF reports for all 20 projects were validated against the official OASIS SARIF 2.1.0 schema. GitHub Actions runs the project suites on Python 3.11 and 3.14.
These tools support controlled review and triage. They require accurate exports, company-specific policies, false-positive evaluation and independent review before operational reliance. They do not provide a universal protection guarantee or compliance certification.
Optional sponsorship helps support documentation, reproducible examples, automated tests and bug fixes across these open-source Python security and automation projects.
ادعم تطوير المشاريع مفتوحة المصدر عبر GitHub Sponsors.
SOC authentication triage · File integrity monitoring · Python file automation · Python terminal game
أنا أنس، مهتم بالأمن السيبراني والبرمجة باستخدام Python. يضم هذا الحساب 20 مشروعًا دفاعيًا لفحص الصلاحيات والسحابة والشبكات والحاويات وسلسلة توريد البرمجيات، وتحليل السجلات والتصيّد ومؤشرات التهديد والتخطيط للاستجابة للحوادث.
لكل مشروع كود قابل للتشغيل، ومدخلات وسياسات موثقة، وأمثلة تجريبية واختبارات. يلزم تقييم الأدوات على بيئة الشركة قبل الاعتماد التشغيلي عليها.