Alternatives and similar repositories for gcpwn

Users that are interested in gcpwn are comparing it to the libraries listed below

• jstawinski / GitHub-Actions-Attack-Diagram
  ☆193Updated 7 months ago
• unknownhad / CloudIntel
  This repo contains IOC, malware and malware analysis associated with Public cloud
  ☆249Updated last year
• iknowjason / edge
  Whois for the Cloud: Recon tool for cloud provider attribution. Supports AWS, Azure, Google, Cloudflare, and Digital Ocean.
  ☆182Updated last month
• 0xd4y / AWSealion
  A tool to keep AWS pentests and red teams efficient, organized, and stealthy.
  ☆96Updated last year
• vectra-ai-research / Halberd
  Halberd : Multi-Cloud Agentic Attack Tool
  ☆321Updated 3 weeks ago
• synacktiv / nord-stream
  Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently …
  ☆313Updated last month
• boostsecurityio / lotp
  boostsecurityio/lotp
  ☆138Updated last month
• VirtueSecurity / IAMhounddog
  A tool to help pentesters quickly identify privileged principals and second-order privilege escalation opportunities in unfamiliar AWS ac…
  ☆135Updated 2 weeks ago
• XMCyber / XMGoat
  ☆174Updated 2 years ago
• orcasecurity-research / AIGoat
  AIGoat: A deliberately Vulnerable AI Infrastructure. Learn AI security through solving our challenges.
  ☆260Updated 2 months ago
• grahamhelton / IMDSpoof
  IMDSPOOF is a cyber deception tool that spoofs the AWS IMDS service to return HoneyTokens that can be alerted on.
  ☆107Updated 2 years ago
• kubenomicon / kubenomicon
  Offensive Kubernetes Threat Matrix -- kubenomicon.com
  ☆43Updated 3 months ago
• Littlehack3r / awesome-gcp-pentesting
  Tools and blogs I use to perform GCP red teams
  ☆132Updated last year
• shabarkin / aws-enumerator
  The AWS Enumerator was created for service enumeration and info dumping for investigations of penetration testers during Black-Box testin…
  ☆235Updated 3 years ago
• ReversecLabs / cloud-security-vm
  Ansible/Vagrant/Packer files to create a virtual machine with the tooling needed to perform cloud security assessments
  ☆142Updated 11 months ago
• padok-team / cognito-scanner
  A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
  ☆108Updated last year
• happycakefriends / certainly
  Certainly is a offensive security toolkit to capture large amounts of traffic in various network protocols in bitflip and typosquat scena…
  ☆218Updated last year
• Frichetten / SneakyEndpoints
  Hide from the InstanceCredentialExfiltration GuardDuty finding by using VPC Endpoints
  ☆122Updated 4 months ago
• elastic / SWAT
  ☆166Updated 2 months ago
• vectra-ai-research / derf
  DeRF (Detection Replay Framework) is an "Attacks As A Service" framework, allowing the emulation of offensive techniques and generation o…
  ☆101Updated last year
• saw-your-packet / CloudShovel
  A tool for scanning public or private AMIs for sensitive files and secrets. The tool follows the research made on AWS CloudQuarry where w…
  ☆110Updated last year
• RhinoSecurityLabs / GCP-IAM-Privilege-Escalation
  A collection of GCP IAM privilege escalation methods documented by the Rhino Security Labs team.
  ☆406Updated last month
• carlospolop / aws_iam_review
  ☆40Updated 2 months ago
• dreadnode / burpference
  A research project to add some brrrrrr to Burp
  ☆194Updated 9 months ago
• lutzenfried / OffensiveCloud
  Offensive security and Penetration Testing TTP for Cloud based environment (AWS / Azure / GCP)
  ☆343Updated 9 months ago
• ReversecLabs / IceKube
  ☆182Updated 7 months ago
• grahamhelton / dredge
  Dredging up secrets from the depths of the file system
  ☆132Updated last year
• DataDog / HASH
  HASH (HTTP Agnostic Software Honeypot)
  ☆141Updated last year
• Verizon / verizon_burp_extensions_ai
  Verizon Burp Extensions: AI Suite
  ☆141Updated 7 months ago
• FalconForceTeam / dAWShund
  Putting a leash on naughty AWS permissions
  ☆132Updated 3 months ago