0xVariable / AWS-Security-Tools

Related projects ⓘ

Alternatives and complementary repositories for AWS-Security-Tools

• trustoncloud / threatmodel-for-aws-s3
  ThreatModel for Amazon S3 - Library of all the attack scenarios on Amazon S3, and how to mitigate them following a risk-based approach
  ☆151Updated last year
• righteousgambit / quiet-riot
  Unauthenticated enumeration of AWS, Azure, and GCP Principals
  ☆203Updated last week
• 9rnt / poro
  Scan publicly accessible assets on your AWS cloud environment
  ☆139Updated 5 months ago
• RyanJarv / awesome-cloud-sec
  Awesome list for cloud security related projects
  ☆77Updated 2 years ago
• brianlam38 / AWS-Certified-Security-Specialty
  AWS Certified Security Specialty (2020) course notes
  ☆115Updated 4 years ago
• senaykt / cloud-security-resources
  ☆91Updated 2 weeks ago
• RhinoSecurityLabs / IAMActionHunter
  An AWS IAM policy statement parser and query tool.
  ☆157Updated 9 months ago
• BishopFox / iam-vulnerable
  Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.
  ☆480Updated 9 months ago
• 0xd4y / AWSealion
  A tool to keep AWS pentests and red teams efficient, organized, and stealthy.
  ☆89Updated 8 months ago
• m6a-UdS / dvca
  Damn Vulnerable Cloud Application
  ☆187Updated 6 years ago
• domain-protect / domain-protect
  OWASP Domain Protect - prevent subdomain takeover
  ☆398Updated last month
• BishopFox / cloudfoxable
  Create your own vulnerable by design AWS penetration testing playground
  ☆331Updated 6 months ago
• vengatesh-nagarajan / Cloud-pentest
  Resources to learn cloud environment and pentesting the same, contains AWS, Azure, Google Cloud
  ☆50Updated 2 years ago
• SummitRoute / aws_exposable_resources
  Resource types that can be publicly exposed on AWS
  ☆317Updated 2 years ago
• nccgroup / sadcloud
  A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure
  ☆659Updated last year
• redskycyber / Cloud-Security
  This Repo serves as a collection of shared security and penetration testing resources for the cloud.
  ☆233Updated 4 months ago
• aquasecurity / cloud-security-remediation-guides
  Security Remediation Guides
  ☆710Updated this week
• unknownhad / CloudIntel
  This repo contains IOC, malware and malware analysis associated with Public cloud
  ☆244Updated last week
• Frichetten / SneakyEndpoints
  Hide from the InstanceCredentialExfiltration GuardDuty finding by using VPC Endpoints
  ☆113Updated last year
• tenable / KaiMonkey
  KaiMonkey provides vulnerable infrastructure as code (IaC) to help explore and understand common cloud security threats exposed via IaC.
  ☆96Updated 11 months ago
• openraven / magpie
  A Cloud Security Posture Manager or CSPM with a focus on security analysis for the modern cloud stack and a focus on the emerging threat …
  ☆175Updated 2 months ago
• iknowjason / edge
  Recon tool for cloud provider attribution. Supports AWS, Azure, Google, Cloudflare, and Digital Ocean.
  ☆159Updated 3 weeks ago
• sbasu7241 / AWS-Threat-Simulation-and-Detection
  Playing around with Stratus Red Team (Cloud Attack simulation tool) and SumoLogic
  ☆282Updated last year
• riskprofiler / CloudFrontier
  Monitor the internet attack surface of various public cloud environments. Currently supports AWS, GCP, Azure, DigitalOcean and Oracle Clo…
  ☆120Updated 7 months ago
• anirudhbiyani / findmytakeover
  find dangling domains in a multi cloud environment
  ☆135Updated 6 months ago
• DavidDikker / endgame
  An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share th…
  ☆188Updated 3 years ago
• WeAreCloudar / s3-account-search
  S3 Account Search
  ☆246Updated last month
• awslabs / aws-cloudsaga
  AWS CloudSaga - Simulate security events in AWS
  ☆443Updated this week
• appsecco / attacking-cloudgoat2
  A step-by-step walkthrough of CloudGoat 2.0 scenarios.
  ☆133Updated 4 years ago