RhinoSecurityLabs / ccat

Related projects ⓘ

Alternatives and complementary repositories for ccat

• RhinoSecurityLabs / Cloud-Security-Research
  Cloud-related research releases from the Rhino Security Labs team.
  ☆356Updated 4 years ago
• carnal0wnage / weirdAAL
  WeirdAAL (AWS Attack Library)
  ☆781Updated last year
• WithSecureLabs / leonidas
  Automated Attack Simulation in the Cloud, complete with detection use cases.
  ☆499Updated this week
• nccgroup / sadcloud
  A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure
  ☆659Updated last year
• BishopFox / smogcloud
  Find cloud assets that no one wants exposed 🔎 ☁️
  ☆332Updated 4 years ago
• BishopFox / iam-vulnerable
  Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.
  ☆480Updated 9 months ago
• RhinoSecurityLabs / AWS-IAM-Privilege-Escalation
  A centralized source of all AWS IAM privilege escalation methods released by Rhino Security Labs.
  ☆897Updated 5 years ago
• m6a-UdS / dvca
  Damn Vulnerable Cloud Application
  ☆187Updated 6 years ago
• projectdiscovery / cloudlist
  Cloudlist is a tool for listing Assets from multiple Cloud Providers.
  ☆861Updated this week
• RhinoSecurityLabs / GCPBucketBrute
  A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.
  ☆489Updated last year
• pumasecurity / serverless-prey
  Serverless Functions for establishing Reverse Shells to Lambda, Azure Functions, and Google Cloud Functions
  ☆235Updated last month
• sbasu7241 / AWS-Threat-Simulation-and-Detection
  Playing around with Stratus Red Team (Cloud Attack simulation tool) and SumoLogic
  ☆282Updated last year
• WithSecureLabs / awspx
  A graph-based tool for visualizing effective access and resource relationships in AWS environments.
  ☆922Updated 2 years ago
• RhinoSecurityLabs / Security-Research
  Exploits written by the Rhino Security Labs team
  ☆1,059Updated 3 years ago
• Voulnet / barq
  barq: The AWS Cloud Post Exploitation framework!
  ☆386Updated 2 years ago
• brompwnie / botb
  A container analysis and exploitation tool for pentesters and engineers.
  ☆644Updated last year
• josehelps / git-wild-hunt
  A tool to hunt for credentials in github wild AKA git*hunt
  ☆292Updated last year
• OpenCSPM / opencspm
  Open Cloud Security Posture Management Engine
  ☆335Updated 2 years ago
• WeAreCloudar / s3-account-search
  S3 Account Search
  ☆246Updated last month
• Accenture / jenkins-attack-framework
  ☆556Updated 3 years ago
• NetSPI / aws_consoler
  A utility to convert your AWS CLI credentials into AWS console access.
  ☆220Updated 4 years ago
• RhinoSecurityLabs / GCP-IAM-Privilege-Escalation
  A collection of GCP IAM privilege escalation methods documented by the Rhino Security Labs team.
  ☆344Updated 7 months ago
• stuhirst / awssecurity
  for AWS Security material
  ☆246Updated 2 years ago
• BishopFox / dufflebag
  Search exposed EBS volumes for secrets
  ☆286Updated last year
• dagrz / aws_pwn
  A collection of AWS penetration testing junk
  ☆1,173Updated last year
• OWASP / Serverless-Goat
  OWASP ServerlessGoat: a serverless application demonstrating common serverless security flaws
  ☆320Updated 3 months ago
• MindPointGroup / cloudfrunt
  A tool for identifying misconfigured CloudFront domains
  ☆347Updated 4 years ago
• andresriancho / nimbostratus
  Tools for fingerprinting and exploiting Amazon cloud infrastructures
  ☆447Updated 2 years ago
• OWASP / DVSA
  a Damn Vulnerable Serverless Application
  ☆534Updated last year
• joshlarsen / aws-recon
  Multi-threaded AWS inventory collection tool with a focus on security-relevant resources and metadata.
  ☆529Updated 7 months ago