OWASP ServerlessGoat: a serverless application demonstrating common serverless security flaws
☆331Jul 30, 2024Updated 2 years ago
Alternatives and similar repositories for Serverless-Goat
Users that are interested in Serverless-Goat are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Serverless Architectures Security Top 10 Guide☆339Oct 24, 2019Updated 7 years ago
- a Damn Vulnerable Serverless Application☆547Sep 12, 2023Updated 3 years ago
- OWASP Serverless Top 10☆218Jul 6, 2021Updated 5 years ago
- A deliberately vulnerable Android application to demonstrate exfiltration scenarios☆13May 20, 2020Updated 6 years ago
- A deliberately vulnerable web application for learning web application security.☆166Apr 28, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- An AWS Lambda vulnerable application written in flask.☆50Oct 9, 2017Updated 9 years ago
- Lambda-Proxy creates an HTTP proxy listening on localhost port 8082. When it receives an HTTP POST request with a very specific structure…☆37Jan 11, 2019Updated 7 years ago
- CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool☆3,766Oct 14, 2026Updated 2 weeks ago
- Damn Vulnerable Cloud Application☆213Sep 12, 2018Updated 8 years ago
- A deliberately vulnerable Kubernetes cluster☆132Dec 15, 2023Updated 2 years ago
- CdkGoat is Bridgecrew's "Vulnerable by Design" AWS CDK repository. CdkGoat is a learning and training project that demonstrates how commo…☆48May 9, 2023Updated 3 years ago
- Cfngoat is Bridgecrew's "Vulnerable by Design" Cloudformation repository. Cfngoat is a learning and training project that demonstrates ho…☆103Aug 5, 2024Updated 2 years ago
- A curated list of awesome serverless security resources such as (e)books, articles, whitepapers, blogs and research papers.☆639May 5, 2022Updated 4 years ago
- 4 AWS Config rules that will boost your AWS Lambda security posture. Created as a companion to the AWS Config blog post by PureSec.☆17Apr 16, 2019Updated 7 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- This script is used to generate some basic detections of the aws security services☆72Feb 21, 2022Updated 4 years ago
- Multi-threaded AWS inventory collection tool with a focus on security-relevant resources and metadata.☆555Jul 13, 2025Updated last year
- Serverless plugin for least privileges.☆250Aug 22, 2021Updated 5 years ago
- Updated incident response generator for training classes☆43Jun 2, 2021Updated 5 years ago
- The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Nod…☆2,086Jun 15, 2024Updated 2 years ago
- A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure☆794Oct 14, 2023Updated 3 years ago
- TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how…☆1,315Jul 13, 2025Updated last year
- Multi-Cloud Security Auditing Tool☆7,863Sep 23, 2025Updated last year
- The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.☆5,377May 19, 2026Updated 5 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Collection of scripts that aid in penetration testing of JSON Web Tokens☆58Feb 2, 2019Updated 7 years ago
- In this workshop, you will learn techniques to secure a serverless application built with AWS Lambda, Amazon API Gateway and RDS Aurora. …☆541Jun 9, 2025Updated last year
- Intentionally Vulnerable Serverless Functions to understand the specifics of Serverless Security Vulnerabilities☆139Dec 8, 2022Updated 3 years ago
- A Serverless Security Library for Developers. Regain Control Over Your AWS Lambda & Google Cloud Functions Runtimes.☆39Oct 29, 2019Updated 7 years ago
- A very vulnerable serverless application in AWS Lambda☆98Oct 7, 2019Updated 7 years ago
- AWS Serverless Security☆400Jul 13, 2022Updated 4 years ago
- A tool for quickly evaluating IAM permissions in AWS.☆1,586Aug 2, 2024Updated 2 years ago
- AWSGoat : A Damn Vulnerable AWS Infrastructure☆2,057May 20, 2025Updated last year
- Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.☆595Mar 12, 2026Updated 7 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- OWASP iGoat (Swift) - A Damn Vulnerable Swift Application for iOS☆457Dec 29, 2025Updated 10 months ago
- Cloud Security Posture Management (CSPM)☆3,783Sep 22, 2026Updated last month
- List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.☆9,523Oct 2, 2026Updated 3 weeks ago
- A step-by-step walkthrough of CloudGoat 2.0 scenarios.☆138Apr 28, 2020Updated 6 years ago
- Serverless Functions for establishing Reverse Shells to Lambda, Azure Functions, and Google Cloud Functions☆248Aug 25, 2026Updated 2 months ago
- barq: The AWS Cloud Post Exploitation framework!☆387Nov 19, 2022Updated 3 years ago
- ☆45Jul 7, 2026Updated 3 months ago