A tool to keep AWS pentests and red teams efficient, organized, and stealthy.
☆97Dec 29, 2025Updated 7 months ago
Alternatives and similar repositories for AWSealion
Users that are interested in AWSealion are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Listing of resources for example AWS Service Control Policies (SCPs)☆16Jan 10, 2024Updated 2 years ago
- A curated list of cloud pentesting resource, contains AWS, Azure, Google Cloud☆150May 24, 2022Updated 4 years ago
- AWSGoat : A Damn Vulnerable AWS Infrastructure☆2,037May 20, 2025Updated last year
- ☆20Nov 6, 2023Updated 2 years ago
- Enumerate AWS cloud resources based on provided credential☆52May 11, 2022Updated 4 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- A vulnerable Cognito application is a simple web app that can be used to practice various Cognito attacks.☆12Jul 13, 2022Updated 4 years ago
- My cheatsheet notes to pentest AWS infrastructure☆715Oct 17, 2022Updated 3 years ago
- Azure and AWS Attacks☆1,131Nov 25, 2022Updated 3 years ago
- ☆617Jun 1, 2023Updated 3 years ago
- ☆25Jul 7, 2022Updated 4 years ago
- Automating situational awareness for cloud penetration tests.☆2,544May 26, 2026Updated 2 months ago
- Cybersecurity Notes☆169Apr 11, 2024Updated 2 years ago
- Research into Undocumented Behavior of Azure AD Refresh Tokens☆13Oct 27, 2023Updated 2 years ago
- ☆142Mar 29, 2023Updated 3 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- A collection of content for blue team professionals, designed to support both reactive and proactive cybersecurity measures of every aspe…☆35Apr 2, 2026Updated 3 months ago
- ☆110Feb 21, 2023Updated 3 years ago
- Uses Sharphound, Bloodhound and Neo4j to produce an actionable list of attack paths for targeted remediation.☆488Jul 9, 2024Updated 2 years ago
- An aggressor script for Cobalt Strike to query Windows' GetLastError messages☆18Sep 25, 2022Updated 3 years ago
- ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring su…☆1,044Feb 9, 2026Updated 5 months ago
- ☆31May 31, 2022Updated 4 years ago
- ☆19Oct 17, 2023Updated 2 years ago
- Presentation materials for my Black Hat USA 2022 Briefing and Arsenal talks☆64Aug 4, 2022Updated 3 years ago
- all random stuff that dont warrant a seperate repo☆12Sep 2, 2022Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- SMBMap is a handy SMB enumeration tool - here with Kerberos support☆73Nov 3, 2021Updated 4 years ago
- Finding all things on-prem Microsoft for password spraying and enumeration.☆259May 17, 2022Updated 4 years ago
- CA Optics - Azure AD Conditional Access Gap Analyzer☆337Aug 28, 2024Updated last year
- Tool to automatically exploit Active Directory privilege escalation paths shown by BloodHound☆705Oct 23, 2025Updated 9 months ago
- This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and …☆2,545Jun 30, 2026Updated 3 weeks ago
- A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.☆399Jan 10, 2025Updated last year
- A repository of breaches of AWS customers☆812Updated this week
- Extensible Azure Security Tool - Documentation☆84Jun 1, 2023Updated 3 years ago
- A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other ob…☆490Oct 14, 2022Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Spartacus DLL/COM Hijacking Toolkit☆1,084Feb 1, 2024Updated 2 years ago
- This repository mainly focuses on various techniques, tools, frameworks and approach to perform offensive exploitation of AWS infrastruct…☆12Jun 12, 2019Updated 7 years ago
- A fast enumeration tool for Windows Active Directory Pentesting written in Go☆286Jan 14, 2023Updated 3 years ago
- An automated, reliable scanner for the Log4Shell (CVE-2021-44228) vulnerability.☆47Jan 22, 2025Updated last year
- havoc2nginx is a simple python script that converts Havoc Framework's yaotl malleable c2 profile to Nginx configuration file format. Most…☆12May 8, 2023Updated 3 years ago
- Spray365 makes spraying Microsoft accounts (Office 365 / Azure AD) easy through its customizable two-step password spraying approach. The…☆381Jun 24, 2025Updated last year
- Assembly HellGate implementation that directly calls Windows System Calls and displays the PPID of the explorer.exe process☆107Mar 8, 2023Updated 3 years ago