Alternatives and similar repositories for gcpwn

Users that are interested in gcpwn are comparing it to the libraries listed below

• vectra-ai-research / Halberd
  Halberd : Multi-Cloud Agentic Attack Tool
  ☆279Updated last week
• iknowjason / edge
  Recon tool for cloud provider attribution. Supports AWS, Azure, Google, Cloudflare, and Digital Ocean.
  ☆168Updated 7 months ago
• jstawinski / GitHub-Actions-Attack-Diagram
  ☆184Updated 2 months ago
• elastic / SWAT
  Simple Workspace Attack Tool (SWAT) is a tool for simulating malicious behavior against Google Workspace in reference to the MITRE ATT&CK…
  ☆165Updated 8 months ago
• unknownhad / CloudIntel
  This repo contains IOC, malware and malware analysis associated with Public cloud
  ☆248Updated 7 months ago
• boostsecurityio / lotp
  boostsecurityio/lotp
  ☆126Updated 2 months ago
• 0xd4y / AWSealion
  A tool to keep AWS pentests and red teams efficient, organized, and stealthy.
  ☆93Updated last year
• XMCyber / XMGoat
  ☆175Updated 2 years ago
• Littlehack3r / awesome-gcp-pentesting
  Tools and blogs I use to perform GCP red teams
  ☆118Updated 11 months ago
• carlospolop / CloudPEASS
  ☆492Updated last week
• synacktiv / nord-stream
  Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently …
  ☆281Updated 4 months ago
• vectra-ai-research / derf
  DeRF (Detection Replay Framework) is an "Attacks As A Service" framework, allowing the emulation of offensive techniques and generation o…
  ☆97Updated last year
• ReversecLabs / cloud-security-vm
  Ansible/Vagrant/Packer files to create a virtual machine with the tooling needed to perform cloud security assessments
  ☆141Updated 5 months ago
• grahamhelton / dredge
  Dredging up secrets from the depths of the file system
  ☆127Updated 7 months ago
• lutzenfried / OffensiveCloud
  Offensive security and Penetration Testing TTP for Cloud based environment (AWS / Azure / GCP)
  ☆336Updated 3 months ago
• DataDog / undocumented-aws-api-hunter
  A tool to uncover undocumented APIs from the AWS Console.
  ☆106Updated last month
• grahamhelton / IMDSpoof
  IMDSPOOF is a cyber deception tool that spoofs the AWS IMDS service to return HoneyTokens that can be alerted on.
  ☆103Updated last year
• RoseSecurity / WolfPack
  WolfPack combines the capabilities of Terraform and Packer to streamline the deployment of red team redirectors on a large scale.
  ☆148Updated 2 weeks ago
• synacktiv / Mindmaps
  Azure mindmap for penetration tests
  ☆185Updated last year
• x1trap / websec-answers
  Websec interview questions by tib3rius answered
  ☆309Updated last year
• ReversecLabs / IceKube
  ☆179Updated last month
• padok-team / cognito-scanner
  A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
  ☆105Updated last year
• DataDog / HASH
  HASH (HTTP Agnostic Software Honeypot)
  ☆138Updated last year
• FalconForceTeam / dAWShund
  Putting a leash on naughty AWS permissions
  ☆122Updated 2 months ago
• Frichetten / SneakyEndpoints
  Hide from the InstanceCredentialExfiltration GuardDuty finding by using VPC Endpoints
  ☆117Updated last year
• saw-your-packet / CloudShovel
  A tool for scanning public or private AMIs for sensitive files and secrets. The tool follows the research made on AWS CloudQuarry where w…
  ☆108Updated 7 months ago
• CCob / okta-terrify
  Okta Verify and Okta FastPass Abuse Tool
  ☆321Updated 9 months ago
• shabarkin / aws-enumerator
  The AWS Enumerator was created for service enumeration and info dumping for investigations of penetration testers during Black-Box testin…
  ☆209Updated 3 years ago
• RefactorSecurity / vscode-security-notes
  Create notes during a security code review in VSCode 📝 Import your favorite SAST tool findings 🛠️ and collaborate with others 🤝
  ☆133Updated 2 months ago
• facebookincubator / ForgeArmory
  ForgeArmory provides TTPs that can be used with the TTPForge (https://github.com/facebookincubator/ttpforge).
  ☆113Updated 9 months ago