A tool to keep AWS pentests and red teams efficient, organized, and stealthy.
☆97Dec 29, 2025Updated 8 months ago
Alternatives and similar repositories for AWSealion
Users that are interested in AWSealion are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Listing of resources for example AWS Service Control Policies (SCPs)☆16Jan 10, 2024Updated 2 years ago
- A curated list of cloud pentesting resource, contains AWS, Azure, Google Cloud☆151May 24, 2022Updated 4 years ago
- AWSGoat : A Damn Vulnerable AWS Infrastructure☆2,045May 20, 2025Updated last year
- ☆20Nov 6, 2023Updated 2 years ago
- Enumerate AWS cloud resources based on provided credential☆52May 11, 2022Updated 4 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A vulnerable Cognito application is a simple web app that can be used to practice various Cognito attacks.☆12Jul 13, 2022Updated 4 years ago
- My cheatsheet notes to pentest AWS infrastructure☆717Oct 17, 2022Updated 3 years ago
- ☆616Jun 1, 2023Updated 3 years ago
- Automating situational awareness for cloud penetration tests.☆2,573Aug 20, 2026Updated 2 weeks ago
- ☆25Jul 7, 2022Updated 4 years ago
- Cybersecurity Notes☆169Apr 11, 2024Updated 2 years ago
- ☆141Mar 29, 2023Updated 3 years ago
- Research into Undocumented Behavior of Azure AD Refresh Tokens☆13Oct 27, 2023Updated 2 years ago
- A collection of content for blue team professionals, designed to support both reactive and proactive cybersecurity measures of every aspe…☆36Apr 2, 2026Updated 5 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆110Feb 21, 2023Updated 3 years ago
- Uses Sharphound, Bloodhound and Neo4j to produce an actionable list of attack paths for targeted remediation.☆488Jul 9, 2024Updated 2 years ago
- An aggressor script for Cobalt Strike to query Windows' GetLastError messages☆18Sep 25, 2022Updated 3 years ago
- ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring su…☆1,045Feb 9, 2026Updated 6 months ago
- ☆30May 31, 2022Updated 4 years ago
- IaaS permission mining tools for identifying privilege escalation risks in cloud providers☆19Oct 17, 2023Updated 2 years ago
- all random stuff that dont warrant a seperate repo☆11Sep 2, 2022Updated 4 years ago
- SMBMap is a handy SMB enumeration tool - here with Kerberos support☆73Nov 3, 2021Updated 4 years ago
- Finding all things on-prem Microsoft for password spraying and enumeration.☆259May 17, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- CA Optics - Azure AD Conditional Access Gap Analyzer☆337Aug 28, 2024Updated 2 years ago
- Tool to automatically exploit Active Directory privilege escalation paths shown by BloodHound☆714Oct 23, 2025Updated 10 months ago
- This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and …☆2,555Jun 30, 2026Updated 2 months ago
- A repository of breaches of AWS customers☆815Updated this week
- A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.☆400Jan 10, 2025Updated last year
- Extensible Azure Security Tool - Documentation☆84Jun 1, 2023Updated 3 years ago
- A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other ob…☆491Oct 14, 2022Updated 3 years ago
- Spartacus DLL/COM Hijacking Toolkit☆1,083Feb 1, 2024Updated 2 years ago
- This repository mainly focuses on various techniques, tools, frameworks and approach to perform offensive exploitation of AWS infrastruct…☆12Jun 12, 2019Updated 7 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Spray365 makes spraying Microsoft accounts (Office 365 / Azure AD) easy through its customizable two-step password spraying approach. The…☆382Jun 24, 2025Updated last year
- A fast enumeration tool for Windows Active Directory Pentesting written in Go☆287Jan 14, 2023Updated 3 years ago
- An automated, reliable scanner for the Log4Shell (CVE-2021-44228) vulnerability.☆47Jan 22, 2025Updated last year
- havoc2nginx is a simple python script that converts Havoc Framework's yaotl malleable c2 profile to Nginx configuration file format. Most…☆12May 8, 2023Updated 3 years ago
- Assembly HellGate implementation that directly calls Windows System Calls and displays the PPID of the explorer.exe process☆106Mar 8, 2023Updated 3 years ago
- Automated Attack Simulation in the Cloud, complete with detection use cases.☆618Nov 28, 2024Updated last year
- A PowerShell script that checks for dangerous ACLs on system hives and shadows☆26Jul 21, 2021Updated 5 years ago