A tool to keep AWS pentests and red teams efficient, organized, and stealthy.
☆97Dec 29, 2025Updated 10 months ago
Alternatives and similar repositories for AWSealion
Users that are interested in AWSealion are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- AWSGoat : A Damn Vulnerable AWS Infrastructure☆2,058Updated this week
- Enumerate AWS cloud resources based on provided credential☆52May 11, 2022Updated 4 years ago
- Listing of resources for example AWS Service Control Policies (SCPs)☆16Jan 10, 2024Updated 2 years ago
- ☆20Nov 6, 2023Updated 3 years ago
- Automating situational awareness for cloud penetration tests.☆2,616Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- My cheatsheet notes to pentest AWS infrastructure☆718Oct 17, 2022Updated 4 years ago
- A curated list of cloud pentesting resource, contains AWS, Azure, Google Cloud☆158May 24, 2022Updated 4 years ago
- A vulnerable Cognito application is a simple web app that can be used to practice various Cognito attacks.☆12Jul 13, 2022Updated 4 years ago
- ☆616Jun 1, 2023Updated 3 years ago
- Azure and AWS Attacks☆1,134Sep 29, 2026Updated last month
- Uses Sharphound, Bloodhound and Neo4j to produce an actionable list of attack paths for targeted remediation.☆489Jul 9, 2024Updated 2 years ago
- ☆141Mar 29, 2023Updated 3 years ago
- Pentesting lab with a Kali Linux instance accessible via ssh & wireguard VPN and with vulnerable instances in a private subnet☆199Jul 4, 2024Updated 2 years ago
- A collection of content for blue team professionals, designed to support both reactive and proactive cybersecurity measures of every aspe…☆36Apr 2, 2026Updated 7 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Cybersecurity Notes☆169Apr 11, 2024Updated 2 years ago
- A repository of breaches of AWS customers☆820Oct 27, 2026Updated last week
- Spray365 makes spraying Microsoft accounts (Office 365 / Azure AD) easy through its customizable two-step password spraying approach. The…☆382Jun 24, 2025Updated last year
- An aggressor script for Cobalt Strike to query Windows' GetLastError messages☆18Sep 25, 2022Updated 4 years ago
- ☆31May 31, 2022Updated 4 years ago
- Automated evasive phishing infrastructure☆18Feb 11, 2023Updated 3 years ago
- ☆110Feb 21, 2023Updated 3 years ago
- IaaS permission mining tools for identifying privilege escalation risks in cloud providers☆19Oct 17, 2023Updated 3 years ago
- Neo4jWordlistHarvester but then with bloodhound json files☆13Jun 10, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and …☆2,581Oct 26, 2026Updated last week
- all random stuff that dont warrant a seperate repo☆12Sep 2, 2022Updated 4 years ago
- Presentation materials for my Black Hat USA 2022 Briefing and Arsenal talks☆64Aug 4, 2022Updated 4 years ago
- Research into Undocumented Behavior of Azure AD Refresh Tokens☆13Oct 27, 2023Updated 3 years ago
- ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring su…☆1,049Feb 9, 2026Updated 8 months ago
- Automated Attack Simulation in the Cloud, complete with detection use cases.☆619Nov 28, 2024Updated last year
- Abusing Reddit API to host the C2 traffic, since most of the blue-team members use Reddit, it might be a great way to make the traffic lo…☆24Jan 23, 2023Updated 3 years ago
- Collection of offensive tools targeting Microsoft Azure☆228Oct 26, 2026Updated last week
- A beginner's guide to reversing APKs and using drozer for security assessment☆11Oct 1, 2020Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆11Mar 1, 2025Updated last year
- Tool to automatically exploit Active Directory privilege escalation paths shown by BloodHound☆724Oct 23, 2025Updated last year
- A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other ob…☆497Oct 14, 2022Updated 4 years ago
- CA Optics - Azure AD Conditional Access Gap Analyzer☆337Aug 28, 2024Updated 2 years ago
- Finding all things on-prem Microsoft for password spraying and enumeration.☆258May 17, 2022Updated 4 years ago
- Spartacus DLL/COM Hijacking Toolkit☆1,085Feb 1, 2024Updated 2 years ago
- Utility to craft HTML or SVG smuggled files for Red Team engagements☆244Mar 19, 2024Updated 2 years ago