Comprehensive AWS cloud reconnaissance and privilege escalation toolkit written in Python. Features IAM, EC2, S3, Lambda, ECS, Secrets Manager, and more — with multi-region scanning and auto-suggested privilege escalation paths.
☆50Jul 8, 2025Updated last year
Alternatives and similar repositories for CloudTap
Users that are interested in CloudTap are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Automated Cloud Misconfiguration Testing☆26Jun 20, 2025Updated last year
- AWS services enumerator for penetration testing☆21Nov 11, 2025Updated 8 months ago
- This tool is designed to seamlessly convert Postman collections into OpenAPI schemas. This conversion is essential for API security testi…☆12Sep 3, 2024Updated last year
- Autonomous AI C2☆33Jul 23, 2024Updated 2 years ago
- AzDevRecon is a powerful web-based enumeration tool for offensive security professionals, red teamers, and pentesters targeting Azure Dev…☆31Oct 13, 2025Updated 9 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- 🛡️ SIGMA Detection Engineering Platform A comprehensive AI-powered detection engineering platform for security teams to explore MITRE AT…☆45Jun 28, 2025Updated last year
- ☆654Jun 28, 2026Updated last month
- Have you ever wanted to search a link or IP address on multiple OSINT pages at once?☆65Jul 7, 2025Updated last year
- ☆147Sep 9, 2025Updated 10 months ago
- ☆157Jun 18, 2026Updated last month
- An offensive toolkit for restless guests #DEFCON33☆60Aug 11, 2025Updated 11 months ago
- A pentesting tool for enumeration/download/graphical analysis of OCI content. Includes an OpenGraph generator for Bloodhound-style analys…☆20Updated this week
- Menu for Thor scanner lite☆20Oct 24, 2025Updated 9 months ago
- Cloud subdomains identification tool☆63Apr 15, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- An modular asset discovery framework written in python to automate the repeating manual work☆80Jun 21, 2026Updated last month
- ☆26Sep 5, 2025Updated 10 months ago
- CloudConqueror is a 4 parter tool, which provides simulation of utilizing AWS CloudControl API as an attack tool.☆15Oct 2, 2025Updated 9 months ago
- MCP server for incident response in AWS☆17Sep 2, 2025Updated 10 months ago
- A PoC to Simulate Ransomware Attack on AWS Environment☆33Oct 14, 2024Updated last year
- IP address filter by City☆12Jan 17, 2025Updated last year
- A tool leveraging Kerberos tickets to get Microsoft 365 access tokens using Seamless SSO☆248Aug 25, 2024Updated last year
- Azure AD (Entra ID) enumeration tool. Find related domains and tenant information in a simple way.☆36Oct 4, 2024Updated last year
- Match & Replace rules for Portswigger's Burp that operate globally across all utilities.☆24Jan 26, 2026Updated 6 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A powerful containerized tool that automatically downloads, extracts, and scans packages from PyPI and npm for embedded secrets, API keys…☆20Jul 25, 2025Updated last year
- Advanced Active Directory network topology analyzer with SMB validation, multiple authentication methods (password/NTLM/Kerberos), and co…☆780May 16, 2026Updated 2 months ago
- ☆54Mar 24, 2026Updated 4 months ago
- regex Hunter- Fast website endpoint sensitive data and Leaks JS files endpoint API Key Scraper☆16Jun 8, 2024Updated 2 years ago
- Detect phantom IAM users, decode leaked AWS Bedrock and Claude Platform API keys, and prevent LLMjacking. CLI + SCPs + SIEM detection rul…☆34Jul 15, 2026Updated 2 weeks ago
- A tool to help pentesters quickly identify privileged principals and second-order privilege escalation opportunities in unfamiliar AWS ac…☆160Jun 10, 2026Updated last month
- This is my personal Enumeration Handbook that I used for the OSCP 2023☆26Aug 21, 2023Updated 2 years ago
- A CVE Data MCP using the CVE.ORG API☆15Jun 4, 2025Updated last year
- Free Windows privilege escalation lab inspired by HTB Devel, built for PNPT and OSCP practice.☆24Jan 13, 2026Updated 6 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A visual reference of 118 essential red team tools, frameworks & standards, organized like a periodic table. Includes a printable PDF ver…☆139Nov 4, 2025Updated 8 months ago
- Malleable Caddy Redirector☆17Apr 24, 2026Updated 3 months ago
- This repository contains a framework of curated Azure penetration testing tools that are specifically designed to help you identify and m…☆26May 13, 2023Updated 3 years ago
- When Your Vision Reaches Beyond IAM Boundary Scope in AWS Cloud☆47Dec 7, 2025Updated 7 months ago
- Enumerate your Kubernetes cluster with just 1 command☆11Apr 10, 2026Updated 3 months ago
- In-target C# post-exploitation tool for Microsoft SQL Server (MS SQL / MSSQL) traversing linked-server chains of any depth with cascading…☆75Updated this week
- A collection of threat hunting and detection engineering Jupyter notebooks accompanying the Weekly Purple Team YouTube channel. Each note…☆17Feb 27, 2026Updated 5 months ago