OWASP / www-project-cloud-native-application-security-top-10

Related projects ⓘ

Alternatives and complementary repositories for www-project-cloud-native-application-security-top-10

• JOSHUAJEBARAJ / GCP-GOAT
  GCP GOAT is the vulnerable application for learn the GCP Security
  ☆62Updated last year
• doyensec / cloudsec-tidbits
  Blogpost series showcasing interesting cloud - web app security bugs
  ☆45Updated last year
• alexivkin / kubepwn
  Kubernetes Pwnage for all
  ☆54Updated 3 years ago
• lightspin-tech / red-detector
  Scan your EC2 instance to find its vulnerabilities using Vuls (https://vuls.io/en/)
  ☆87Updated last year
• NotSoSecure / cloud-sec-wiki
  Jekyll Files for cloudsecwiki.com
  ☆49Updated 3 years ago
• appsecco / attacking-cloudgoat2
  A step-by-step walkthrough of CloudGoat 2.0 scenarios.
  ☆133Updated 4 years ago
• WithSecureLabs / cloud-wiki
  A public cloud security knowledgebase - https://www.secwiki.cloud/
  ☆48Updated 8 months ago
• semgrep-old / rules-owasp-asvs
  Semgrep rules corresponding to the OWASP ASVS standard
  ☆27Updated 4 years ago
• lightspin-tech / red-shadow
  Lightspin AWS IAM Vulnerability Scanner
  ☆96Updated 3 years ago
• SygniaLabs / security-cloud-scout
  ☆133Updated last year
• mhaskar / Bughound
  Static code analysis tool based on Elasticsearch
  ☆130Updated 3 years ago
• Frichetten / aws_stealth_perm_enum
  Research on the enumeration of IAM permissions without logging to CloudTrail
  ☆60Updated 3 years ago
• doyensec / PESD-Exporter-Extension
  PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagrams
  ☆97Updated 9 months ago
• adanalvarez / TrailGuard
  Tool to check the CloudTrail configuration and the services where trails are sent, to detect potential attacks to CloudTrail logging.
  ☆13Updated 5 months ago
• grines / scour
  ☆125Updated 3 months ago
• prevade / cloudjack
  Route53/CloudFront Vulnerability Assessment Utility
  ☆84Updated last year
• NicholasSpringer / thunder-ctf
  GCP cloud security CTF
  ☆41Updated 7 months ago
• sebastian-mora / awsssome_phish
  AWS SSO serverless phishing API.
  ☆29Updated 3 years ago
• AbstractClass / CloudPrivs
  Determine privileges from cloud credentials via brute-force testing.
  ☆64Updated 2 months ago
• vengatesh-nagarajan / Cloud-pentest
  Resources to learn cloud environment and pentesting the same, contains AWS, Azure, Google Cloud
  ☆50Updated 2 years ago
• prisma-cloud / IAMFinder
  IAMFinder enumerates and finds users and IAM roles in a target AWS account.
  ☆109Updated 3 years ago
• piercing-index / cloud-vulnerabilities
  ☆36Updated 6 months ago
• nccgroup / ccs
  ☆109Updated last year
• kerberosmansour / InfoSecOpenAIExamples
  InfoSec OpenAI Examples
  ☆19Updated 11 months ago
• RhinoSecurityLabs / CloudScraper
  CloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.
  ☆27Updated 2 years ago
• ncc-erik-steringer / Aerides
  An implementation of infrastructure-as-code scanning using dynamic tooling.
  ☆56Updated 2 years ago
• OWASP / kstg
  Kubernetes Security Testing Guide
  ☆26Updated 6 months ago
• OWASP / www-project-devsecops-verification-standard
  OWASP Foundation Web Respository
  ☆37Updated 2 months ago