Alternatives and similar repositories for AWSealion

Users that are interested in AWSealion are comparing it to the libraries listed below

• carlospolop / aws_iam_review
  ☆37Updated last month
• iknowjason / edge
  Recon tool for cloud provider attribution. Supports AWS, Azure, Google, Cloudflare, and Digital Ocean.
  ☆172Updated 10 months ago
• XMCyber / XMGoat
  ☆175Updated 2 years ago
• unknownhad / CloudIntel
  This repo contains IOC, malware and malware analysis associated with Public cloud
  ☆249Updated 10 months ago
• Littlehack3r / awesome-gcp-pentesting
  Tools and blogs I use to perform GCP red teams
  ☆126Updated last year
• grahamhelton / IMDSpoof
  IMDSPOOF is a cyber deception tool that spoofs the AWS IMDS service to return HoneyTokens that can be alerted on.
  ☆104Updated last year
• padok-team / cognito-scanner
  A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
  ☆108Updated last year
• NetSPI / gcpwn
  Enumeration/exploit/analysis/download/etc pentesting framework for GCP; modeled like Pacu for AWS; a product of numerous hours via @Webbi…
  ☆260Updated 3 months ago
• gladstomych / AHHHZURE
  AHHHZURE is an automated deployment script that creates a vulnerable Azure cloud lab for offensive security practitioners and enthusiasts…
  ☆105Updated last year
• JOSHUAJEBARAJ / GCP-GOAT
  GCP GOAT is the vulnerable application for learn the GCP Security
  ☆67Updated 3 months ago
• Frichetten / SneakyEndpoints
  Hide from the InstanceCredentialExfiltration GuardDuty finding by using VPC Endpoints
  ☆122Updated last month
• stephenbradshaw / aws_url_signer
  POC tool to create signed AWS API GET requests to bypass Guard Duty alerting of off-instance credential use via SSRF
  ☆58Updated last year
• SygniaLabs / security-cloud-scout
  ☆138Updated 2 years ago
• saw-your-packet / CloudShovel
  A tool for scanning public or private AMIs for sensitive files and secrets. The tool follows the research made on AWS CloudQuarry where w…
  ☆109Updated 10 months ago
• Slayer0x / Cloud-Detective
  Cloud subdomains identification tool
  ☆60Updated 4 months ago
• blacklanternsecurity / offensive-azure
  Collection of offensive tools targeting Microsoft Azure
  ☆214Updated 2 years ago
• Permiso-io-tools / RansomWhen
  RansomWhen is a tool to enumerate identities that can lock S3 Buckets using KMS, resulting in ransomwares, as well as detect occurances o…
  ☆56Updated 7 months ago
• SikretaLabs / BlueMap
  A Azure Exploitation Toolkit for Red Team & Pentesters
  ☆164Updated 2 years ago
• dievus / AWeSomeUserFinder
  AWS IAM Username Enumerator and Password Spraying Tool in Python3
  ☆85Updated 4 months ago
• ayushpriya10 / IMDShift
  ☆57Updated 2 years ago
• hac01 / gcp-iam-brute
  ☆50Updated last year
• vectra-ai-research / derf
  DeRF (Detection Replay Framework) is an "Attacks As A Service" framework, allowing the emulation of offensive techniques and generation o…
  ☆102Updated last year
• jakedmurphy1 / GoogleBITB
  ☆31Updated 3 years ago
• Verizon / verizon_burp_extensions_ai
  Verizon Burp Extensions: AI Suite
  ☆138Updated 4 months ago
• ustayready / cloudgpt
  Vulnerability scanner for AWS customer managed policies using ChatGPT
  ☆166Updated 2 years ago
• vengatesh-nagarajan / Cloud-pentest
  Resources to learn cloud environment and pentesting the same, contains AWS, Azure, Google Cloud
  ☆53Updated 3 years ago
• AbstractClass / CloudPrivs
  Determine privileges from cloud credentials via brute-force testing.
  ☆69Updated last year
• grahamhelton / dredge
  Dredging up secrets from the depths of the file system
  ☆131Updated 10 months ago
• kh4sh3i / cloud-penetration-testing
  A curated list of cloud pentesting resource, contains AWS, Azure, Google Cloud
  ☆125Updated 3 years ago
• wavestone-cdt / DEFCON-CICD-pipelines-workshop
  ☆94Updated 2 years ago