Alternatives and similar repositories for Serverless-Goat:

Users that are interested in Serverless-Goat are comparing it to the libraries listed below

• OWASP / DVSA
  a Damn Vulnerable Serverless Application
  ☆536Updated last year
• OWASP / Serverless-Top-10-Project
  OWASP Serverless Top 10
  ☆215Updated 3 years ago
• SummitRoute / aws_exposable_resources
  Resource types that can be publicly exposed on AWS
  ☆320Updated 2 years ago
• pumasecurity / serverless-prey
  Serverless Functions for establishing Reverse Shells to Lambda, Azure Functions, and Google Cloud Functions
  ☆236Updated last month
• mykter / aws-security-cert-service-notes
  Security aspects of AWS products for the Security Specialist certification
  ☆208Updated 2 years ago
• RhinoSecurityLabs / Cloud-Security-Research
  Cloud-related research releases from the Rhino Security Labs team.
  ☆375Updated 4 years ago
• nccgroup / sadcloud
  A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure
  ☆676Updated last year
• owasp-cloud-security / owasp-cloud-security
  OWASP Cloud Security - Enabling conversations through threat and control stories
  ☆178Updated 6 years ago
• awslabs / threat-composer
  A simple threat modeling tool to help humans to reduce time-to-value when threat modeling
  ☆497Updated last month
• righteousgambit / quiet-riot
  Unauthenticated enumeration of AWS, Azure, and GCP Principals
  ☆210Updated 2 months ago
• BishopFox / iam-vulnerable
  Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.
  ☆487Updated 11 months ago
• trustoncloud / threatmodel-for-aws-s3
  ThreatModel for Amazon S3 - Library of all the attack scenarios on Amazon S3, and how to mitigate them following a risk-based approach
  ☆151Updated last year
• Skyscanner / LambdaGuard
  AWS Serverless Security
  ☆400Updated 2 years ago
• awslabs / aws-security-assessment-solution
  An AWS tool to help you create a point in time assessment of your AWS account using Prowler.
  ☆526Updated 2 months ago
• brianlam38 / AWS-Certified-Security-Specialty
  AWS Certified Security Specialty (2020) course notes
  ☆115Updated 4 years ago
• WithSecureLabs / leonidas
  Automated Attack Simulation in the Cloud, complete with detection use cases.
  ☆550Updated last month
• we45 / ThreatPlaybook
  A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestrat…
  ☆275Updated 3 weeks ago
• salesforce / metabadger
  Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 (IMDSv2).
  ☆141Updated 9 months ago
• we45 / DVFaaS-Damn-Vulnerable-Functions-as-a-Service
  Intentionally Vulnerable Serverless Functions to understand the specifics of Serverless Security Vulnerabilities
  ☆135Updated 2 years ago
• tenable / KaiMonkey
  KaiMonkey provides vulnerable infrastructure as code (IaC) to help explore and understand common cloud security threats exposed via IaC.
  ☆97Updated last year
• awslabs / amazon-guardduty-tester
  This repository can be used to generate and evaluate findings detected by Amazon GuardDuty
  ☆356Updated last month
• awslabs / aws-security-automation
  Collection of scripts and resources for DevSecOps and Automated Incident Response Security
  ☆621Updated 4 years ago
• easttimor / aws-incident-response
  ☆368Updated 10 months ago
• stuhirst / awssecurity
  for AWS Security material
  ☆246Updated 2 years ago
• appsecco / attacking-cloudgoat2
  A step-by-step walkthrough of CloudGoat 2.0 scenarios.
  ☆134Updated 4 years ago
• domain-protect / domain-protect
  OWASP Domain Protect - prevent subdomain takeover
  ☆401Updated 3 weeks ago
• dowjones / hammer
  Dow Jones Hammer : Protect the cloud with the power of the cloud(AWS)
  ☆437Updated last year