Alternatives and similar repositories for XMGoat

Users that are interested in XMGoat are comparing it to the libraries listed below

• iknowjason / edge
  Whois for the Cloud: Recon tool for cloud provider attribution. Supports AWS, Azure, Google, Cloudflare, and Digital Ocean.
  ☆182Updated last month
• SygniaLabs / security-cloud-scout
  ☆139Updated 2 years ago
• 0xd4y / AWSealion
  A tool to keep AWS pentests and red teams efficient, organized, and stealthy.
  ☆96Updated last year
• Littlehack3r / awesome-gcp-pentesting
  Tools and blogs I use to perform GCP red teams
  ☆132Updated last year
• joswr1ght / basicblobfinder
  Identify Azure blobs using a wordlist of account name and container name strings
  ☆44Updated 8 months ago
• iknowjason / BlueCloud
  Cyber Range including Velociraptor + HELK system with a Windows VM for security testing and R&D. Azure and AWS terraform support.
  ☆142Updated 3 years ago
• gladstomych / AHHHZURE
  AHHHZURE is an automated deployment script that creates a vulnerable Azure cloud lab for offensive security practitioners and enthusiasts…
  ☆106Updated last year
• sbasu7241 / AWS-Threat-Simulation-and-Detection
  Playing around with Stratus Red Team (Cloud Attack simulation tool) and SumoLogic
  ☆304Updated 2 years ago
• Frichetten / SneakyEndpoints
  Hide from the InstanceCredentialExfiltration GuardDuty finding by using VPC Endpoints
  ☆122Updated 4 months ago
• unknownhad / CloudIntel
  This repo contains IOC, malware and malware analysis associated with Public cloud
  ☆249Updated last year
• ralphte / build_a_phish
  Ansible playbook to deploy a phishing engagement in the cloud.
  ☆223Updated 3 years ago
• iknowjason / AriaCloud
  A Docker container for remote penetration testing.
  ☆141Updated 4 years ago
• SikretaLabs / BlueMap
  A Azure Exploitation Toolkit for Red Team & Pentesters
  ☆165Updated 2 years ago
• NetSPI / gcpwn
  Enumeration/exploit/analysis/download/etc pentesting framework for GCP; modeled like Pacu for AWS; a product of numerous hours via @Webbi…
  ☆273Updated 6 months ago
• vectra-ai-research / derf
  DeRF (Detection Replay Framework) is an "Attacks As A Service" framework, allowing the emulation of offensive techniques and generation o…
  ☆101Updated last year
• cyberark / BlobHunter
  Find exposed data in Azure with this public blob scanner
  ☆346Updated last year
• dahvidschloss / CRASH
  Completely Risky Active-Directory Simulation Hub
  ☆102Updated 2 years ago
• mvelazc0 / PurpleTeamPlaybook
  Active Directory Purple Team Playbook
  ☆112Updated 2 years ago
• facebookincubator / ForgeArmory
  ForgeArmory provides TTPs that can be used with the TTPForge (https://github.com/facebookincubator/ttpforge).
  ☆117Updated last year
• vectra-ai-research / Halberd
  Halberd : Multi-Cloud Agentic Attack Tool
  ☆321Updated 3 weeks ago
• elastic / SWAT
  ☆166Updated 2 months ago
• lutzenfried / OffensiveCloud
  Offensive security and Penetration Testing TTP for Cloud based environment (AWS / Azure / GCP)
  ☆343Updated 9 months ago
• C0axx / CanaryHunter
  Canary Hunter aims to be a quick PowerShell script to check for Common Canaries in various formats generated for free on canarytokens.org
  ☆123Updated 3 years ago
• SySS-Research / azurenum
  Enumerate Microsoft Entra ID (Azure AD) fast
  ☆99Updated 7 months ago
• mvelazc0 / BadZure
  BadZure automates the deployment of intentionally misconfigured Entra ID tenants and Azure subscriptions, populating them with diverse en…
  ☆478Updated 3 weeks ago
• carlospolop / aws_iam_review
  ☆40Updated 2 months ago
• netwrix / PingCastleCloud
  Audit program for AzureAD
  ☆149Updated 2 years ago
• microsoft / Azure-Threat-Research-Matrix
  ☆78Updated last year
• TactiKoolSec / OTHF
  Open Threat Hunting Framework
  ☆120Updated 2 years ago
• mgeeky / AzureRT
  AzureRT - A Powershell module implementing various Azure Red Team tactics
  ☆237Updated 3 years ago