Alternatives and similar repositories for DVSA

Users that are interested in DVSA are comparing it to the libraries listed below

• OWASP / Serverless-Goat
  OWASP ServerlessGoat: a serverless application demonstrating common serverless security flaws
  ☆327Updated last year
• RhinoSecurityLabs / Cloud-Security-Research
  Cloud-related research releases from the Rhino Security Labs team.
  ☆392Updated 5 years ago
• OWASP / Serverless-Top-10-Project
  OWASP Serverless Top 10
  ☆218Updated 4 years ago
• carnal0wnage / weirdAAL
  WeirdAAL (AWS Attack Library)
  ☆826Updated 9 months ago
• nccgroup / sadcloud
  A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure
  ☆731Updated 2 years ago
• we45 / DVFaaS-Damn-Vulnerable-Functions-as-a-Service
  Intentionally Vulnerable Serverless Functions to understand the specifics of Serverless Security Vulnerabilities
  ☆136Updated 2 years ago
• BishopFox / iam-vulnerable
  Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.
  ☆520Updated last month
• RhinoSecurityLabs / AWS-IAM-Privilege-Escalation
  A centralized source of all AWS IAM privilege escalation methods released by Rhino Security Labs.
  ☆922Updated 6 years ago
• opendevsecops / guide-aws-hacking
  This is an offensive guide to securing AWS infrastructures. The hope is that by knowing how to take advantage of various types of AWS wea…
  ☆172Updated 6 years ago
• RhinoSecurityLabs / Security-Research
  Exploits written by the Rhino Security Labs team
  ☆1,081Updated 4 years ago
• mykter / aws-security-cert-service-notes
  Security aspects of AWS products for the Security Specialist certification
  ☆212Updated 3 years ago
• MindPointGroup / cloudfrunt
  A tool for identifying misconfigured CloudFront domains
  ☆359Updated 5 years ago
• Voulnet / barq
  barq: The AWS Cloud Post Exploitation framework!
  ☆385Updated 2 years ago
• andresriancho / nimbostratus
  Tools for fingerprinting and exploiting Amazon cloud infrastructures
  ☆484Updated 2 years ago
• owasp-cloud-security / owasp-cloud-security
  OWASP Cloud Security - Enabling conversations through threat and control stories
  ☆182Updated 6 years ago
• pumasecurity / serverless-prey
  Serverless Functions for establishing Reverse Shells to Lambda, Azure Functions, and Google Cloud Functions
  ☆251Updated 3 months ago
• RhinoSecurityLabs / GCPBucketBrute
  A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.
  ☆536Updated 2 years ago
• appsecco / attacking-cloudgoat2
  A step-by-step walkthrough of CloudGoat 2.0 scenarios.
  ☆135Updated 5 years ago
• we45 / ThreatPlaybook
  A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestrat…
  ☆279Updated 3 weeks ago
• absoluteappsec / handouts
  materials we hand out
  ☆147Updated 3 months ago
• domain-protect / domain-protect
  OWASP Domain Protect - prevent subdomain takeover
  ☆399Updated 10 months ago
• BishopFox / dufflebag
  Search exposed EBS volumes for secrets
  ☆302Updated 2 years ago
• nagwww / s3-leaks
  List of S3 Hacks
  ☆430Updated 6 months ago
• dagrz / aws_pwn
  A collection of AWS penetration testing junk
  ☆1,208Updated 2 years ago
• PacktPublishing / Hands-On-AWS-Penetration-Testing-with-Kali-Linux
  Hands-On AWS Penetration Testing with Kali Linux published by Packt
  ☆134Updated 2 years ago
• OWASP / threat-model-cookbook
  This project is about creating and publishing threat model examples.
  ☆426Updated 3 years ago
• BlazingWind / OWASP-ASVS-4.0-testing-guide
  ☆124Updated last year
• m6a-UdS / dvca
  Damn Vulnerable Cloud Application
  ☆199Updated 7 years ago
• SummitRoute / aws_exposable_resources
  Resource types that can be publicly exposed on AWS
  ☆328Updated 3 years ago
• tprynn / web-methodology
  Methodology for high-quality web application security testing - https://github.com/tprynn/web-methodology/wiki
  ☆212Updated 11 months ago