AWS Attack Path Scanner - Discover privilege escalation paths across 10+ AWS services
☆157Dec 4, 2025Updated 8 months ago
Alternatives and similar repositories for heimdall
Users that are interested in heimdall are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆58Mar 6, 2026Updated 5 months ago
- A tool to help pentesters quickly identify privileged principals and second-order privilege escalation opportunities in unfamiliar AWS ac…☆160Jun 10, 2026Updated 2 months ago
- Did you contain the compromised identity? notyet☆42Jul 16, 2026Updated last month
- A VS Code/Cursor extension capable of performing realtime security monitoring from inside the IDE☆118Aug 10, 2026Updated last week
- Verified Entity Identity Lock (Expose hidden trust paths in your AWS IAM setup before they become security risks.)☆16Apr 20, 2026Updated 3 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A collection of servers which are deliberately vulnerable to learn Pentesting MCP Servers.☆276Dec 18, 2025Updated 8 months ago
- Check your AWS CLI commands for security risks before you run them.☆33Apr 1, 2026Updated 4 months ago
- ☆39Jul 31, 2025Updated last year
- A comprehensive framework for analyzing and defending against attacks targeting Software Development Life Cycle Infrastructure.☆177Jul 29, 2026Updated 2 weeks ago
- JamfHound is a python3 project designed to collect and identify attack paths in Jamf Pro tenants based on existing object permissions by …☆134Apr 23, 2026Updated 3 months ago
- Detect phantom IAM users, decode leaked AWS Bedrock and Claude Platform API keys, and prevent LLMjacking. CLI + SCPs + SIEM detection rul…☆36Aug 5, 2026Updated last week
- Threat Designer is a GenerativeAI application designed to automate and streamline the threat modeling process for secure system design.☆278Updated this week
- ☆24Mar 4, 2025Updated last year
- An AWS IAM Privilege Escalation Path Library☆149Updated this week
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- AWS services enumerator for penetration testing☆21Nov 11, 2025Updated 9 months ago
- An index of publicly available and open-source threat detection rulesets.☆138Apr 17, 2025Updated last year
- Google Maps for AWS IAM☆276Updated this week
- Fast and easy to use CLI-based file encryption program 📦☆13Oct 12, 2025Updated 10 months ago
- Trustline: Check external access on your AWS account☆138Jun 20, 2026Updated last month
- GitHub Action to alert on security patches before the CVE drops.☆217Updated this week
- Nova-Proximity is a MCP and Agent Skills security scanner powered with NOVA☆302Mar 26, 2026Updated 4 months ago
- MCP to help Defenders Detection Engineer Harder and Smarter☆471Jun 16, 2026Updated 2 months ago
- SecureMCP is a security auditing tool designed to detect vulnerabilities and misconfigurations in applications using the [Model Context P…☆140Jun 7, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- CloudSplaining on AWS Managed Policies☆44Sep 8, 2025Updated 11 months ago
- MCP (Model Context Protocol) Server for pycti☆16Jul 11, 2025Updated last year
- Gixy-Next: NGINX Configuration Security Scanner & Performance Checker☆187Updated this week
- IP Rotation from different providers - Like FireProx but for GCP, Azure, Alibaba and CloudFlare☆294Jul 30, 2026Updated 2 weeks ago
- Secrets scanner with a twist... this is for getting threat actor credentials from MALWARE. Acquire TA creds from FLOSS exports, memdumps…☆39Aug 9, 2026Updated last week
- Security gateway for AI agents - credential-isolated API proxying and policy-gated remote execution (conclaves). Reduce the blast radius!☆136Mar 11, 2026Updated 5 months ago
- A Linux kernel integrity scanner☆17May 2, 2026Updated 3 months ago
- A Unified Framework for Detecting Point and Collective Anomalies in Operating System Logs via Collaborative Transformers☆23Jan 28, 2026Updated 6 months ago
- ☆15Jun 4, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Cloud Commotion intends to cause chaos to simulate security incidents☆148Jun 18, 2024Updated 2 years ago
- Suzaku (朱雀) is a sigma-based threat hunting and fast forensics timeline generator for cloud logs.☆211Aug 3, 2026Updated 2 weeks ago
- Halberd : Multi-Cloud Agentic Attack Tool☆342Apr 8, 2026Updated 4 months ago
- Assortment of scripts and tools for our Blackhat EU 2024 talk☆107Feb 6, 2025Updated last year
- Simplified CloudTrail analysis for AI agents☆41Updated this week
- High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential v…☆673Aug 4, 2026Updated 2 weeks ago
- Metis is an open-source, AI-driven tool for deep security code review☆844Updated this week