Alternatives and similar repositories for FlowAnalyzer:

Users that are interested in FlowAnalyzer are comparing it to the libraries listed below

• jstawinski / GitHub-Actions-Attack-Diagram
  ☆163Updated 6 months ago
• WithSecureLabs / cloud-security-vm
  Ansible/Vagrant/Packer files to create a virtual machine with the tooling needed to perform cloud security assessments
  ☆138Updated 2 months ago
• cado-security / cloudgrep
  cloudgrep is grep for cloud storage
  ☆324Updated 3 weeks ago
• Addepar / RedFlag
  RedFlag uses AI to identify high-risk code changes. Run it in batch mode for release candidate testing or in CI pipelines to flag PRs and…
  ☆148Updated 4 months ago
• cybrota / whispr
  A multi-vault secret injection tool for safely injecting secrets into app environment
  ☆120Updated this week
• DataDog / grimoire
  Generate datasets of cloud audit logs for common attacks
  ☆208Updated 7 months ago
• huntresslabs / rogueapps
  When good OAuth apps go rogue. Documents observed OAuth application tradecraft
  ☆69Updated 2 months ago
• NetSPI / gcpwn
  Enumeration/exploit/analysis/download/etc pentesting framework for GCP; modeled like Pacu for AWS; a product of numerous hours via @Webbi…
  ☆235Updated last week
• singe / tidcli
  A simple touchID prompt'er for use in shell scripts.
  ☆96Updated 9 months ago
• hotnops / apeman
  AWS Attack Path Management Tool - Walking on the Moon
  ☆242Updated 3 months ago
• elastic / SWAT
  Simple Workspace Attack Tool (SWAT) is a tool for simulating malicious behavior against Google Workspace in reference to the MITRE ATT&CK…
  ☆164Updated 5 months ago
• Aqua-Nautilus / TrailShark
  ☆47Updated 4 months ago
• adanalvarez / HoneyTrail
  Independently deploy customized honeyservices in AWS to trigger alerts on unauthorized access. It utilizes a dedicated CloudTrail for pre…
  ☆51Updated 4 months ago
• adeptex / whispers
  Identify hardcoded secrets in static structured text (version 2)
  ☆90Updated last month
• HackingLZ / IndicatorOfCanary
  Canary Detection
  ☆164Updated 11 months ago
• saw-your-packet / CloudShovel
  A tool for scanning public or private AMIs for sensitive files and secrets. The tool follows the research made on AWS CloudQuarry where w…
  ☆103Updated 4 months ago
• Rezonate-io / github-oidc-checker
  Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts
  ☆61Updated last year
• vectra-ai-research / Halberd
  Halberd : Multi-Cloud Attack Platform
  ☆251Updated 2 weeks ago
• Permiso-io-tools / LogLicker
  Tool for obfuscating and deobfuscating data.
  ☆69Updated last year
• DataDog / undocumented-aws-api-hunter
  A tool to uncover undocumented APIs from the AWS Console.
  ☆98Updated 4 months ago
• synacktiv / nord-stream
  Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently …
  ☆272Updated last month
• semgr8ns / semgr8s
  Semgrep-based Policy Controller for Kubernetes
  ☆47Updated last week
• klarna-incubator / gram
  Gram is Klarna's own threat model diagramming tool
  ☆319Updated last week
• domain-protect / domain-protect-gcp
  Protect against subdomain takeover
  ☆93Updated 9 months ago
• TinderSec / oidc-scanner-aws
  ☆47Updated 2 years ago
• WithSecureLabs / IceKube
  ☆175Updated 4 months ago
• boostsecurityio / lotp
  boostsecurityio/lotp
  ☆115Updated last week
• offensive-actions / terraform-provider-statefile-rce
  This terraform provider can be used to get remote code execution by injecting a dummy resource in a writeable state file.
  ☆52Updated last month
• edera-dev / am-i-isolated
  Validate the isolation posture of your container environment.
  ☆255Updated this week