duo-labs

CloudMapper helps you analyze your Amazon Web Services (AWS) environments.

AWS IAM linting library

Pythonic WebAuthn 🐍

WebAuthn (FIDO2) server library written in Go

CloudTracker helps you find over-privileged IAM users and roles by comparing CloudTrail logs with current IAM policies.

The source code for webauthn.io, a demonstration of WebAuthn.

A small client application that uses the Duo Labs EFIgy API to inform you about the state of your Mac EFI firmware

Dlint is a tool for encouraging best coding practices and helping ensure we're writing secure Python code.

Syncs Markdown files to Confluence

A collection of IDAPython modules made with 💚 by Duo Labs

Dashboard to collect, analyze, and respond to reported phishing emails.

Boilerplate code for a Chrome extension using TypeScript, React, and Webpack.

Monitors Github for leaked secrets

Tools to explore the XPC interface of Apple's T2 chip

The code used in the "Don't @ Me: Hunting Twitter Bots at Scale" Black Hat presentation

Python script to hunt phishing kits

A toolkit to generate an offline Chrome extension to detect phishing attacks using a bespoke convolutional neural network.

X-Ray allows you to scan your Android device for security vulnerabilities that put your device at risk.

A WebAuthn Authenticator for Android leveraging hardware-backed key storage and biometric user verification.

Presentations, training modules, and other education materials from Duo Security's Application Security team.