BishopFox / cloudfoxable
Create your own vulnerable by design AWS penetration testing playground
☆362Updated 2 months ago
Alternatives and similar repositories for cloudfoxable:
Users that are interested in cloudfoxable are comparing it to the libraries listed below
- This Repo serves as a collection of shared security and penetration testing resources for the cloud.☆261Updated 8 months ago
- GCPGoat : A Damn Vulnerable GCP Infrastructure☆379Updated 5 months ago
- This repo contains IOC, malware and malware analysis associated with Public cloud☆249Updated 4 months ago
- Websec interview questions by tib3rius answered☆307Updated last year
- Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.☆494Updated last year
- A collection of GCP IAM privilege escalation methods documented by the Rhino Security Labs team.☆378Updated 11 months ago
- Awesome curate list of cyber security penetration testing tools for Cloud Security mainly AWS/Azure/Google☆121Updated 3 years ago
- An AWS IAM policy statement parser and query tool.☆175Updated last year
- Enumeration/exploit/analysis/download/etc pentesting framework for GCP; modeled like Pacu for AWS; a product of numerous hours via @Webbi…☆238Updated 2 weeks ago
- Security interview questions with possible explanation for roles in AppSec, Pentesting, Cloud Security, DevSecOps, Network Security and s…☆332Updated 3 months ago
- A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure☆689Updated last year
- Offensive security and Penetration Testing TTP for Cloud based environment (AWS / Azure / GCP)☆325Updated 3 weeks ago
- Halberd : Multi-Cloud Attack Platform☆256Updated 3 weeks ago
- Awesome list for cloud security related projects☆116Updated 2 years ago
- Generate datasets of cloud audit logs for common attacks☆208Updated 7 months ago
- cloudgrep is grep for cloud storage☆324Updated last month
- ☆363Updated 11 months ago
- AzureGoat : A Damn Vulnerable Azure Infrastructure☆833Updated 5 months ago
- RedCloudOS is a Cloud Adversary Simulation Operating System for Red Teams to assess the Cloud Security of Leading Cloud Service Providers…☆627Updated 9 months ago
- Unauthenticated enumeration of AWS, Azure, and GCP Principals☆223Updated 4 months ago
- SessionProbe is a multi-threaded tool designed for penetration testing and bug bounty hunting. It evaluates user privileges in web applic…☆447Updated last year
- AWS Attack Path Management Tool - Walking on the Moon☆242Updated 3 months ago
- Recon tool for cloud provider attribution. Supports AWS, Azure, Google, Cloudflare, and Digital Ocean.☆165Updated 5 months ago
- The AWS Enumerator was created for service enumeration and info dumping for investigations of penetration testers during Black-Box testin…☆198Updated 2 years ago
- ☆172Updated last year
- Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records.☆675Updated 5 months ago
- ☆236Updated 2 months ago
- Practical resources for offensive CI/CD security research. Curated the best resources I've seen since 2021.☆516Updated last month
- A curated list of Awesome Security Challenges.☆179Updated 4 months ago
- A curated list of cloud pentesting resource, contains AWS, Azure, Google Cloud☆116Updated 2 years ago