Alternatives and similar repositories for XMGoat

Users that are interested in XMGoat are comparing it to the libraries listed below

• iknowjason / edge
  Whois for the Cloud: Recon tool for cloud provider attribution. Supports AWS, Azure, Google, Cloudflare, and Digital Ocean.
  ☆177Updated 2 weeks ago
• SygniaLabs / security-cloud-scout
  ☆139Updated 2 years ago
• 0xd4y / AWSealion
  A tool to keep AWS pentests and red teams efficient, organized, and stealthy.
  ☆96Updated last year
• joswr1ght / basicblobfinder
  Identify Azure blobs using a wordlist of account name and container name strings
  ☆43Updated 7 months ago
• Littlehack3r / awesome-gcp-pentesting
  Tools and blogs I use to perform GCP red teams
  ☆129Updated last year
• iknowjason / BlueCloud
  Cyber Range including Velociraptor + HELK system with a Windows VM for security testing and R&D. Azure and AWS terraform support.
  ☆140Updated 2 years ago
• NetSPI / gcpwn
  Enumeration/exploit/analysis/download/etc pentesting framework for GCP; modeled like Pacu for AWS; a product of numerous hours via @Webbi…
  ☆266Updated 5 months ago
• gladstomych / AHHHZURE
  AHHHZURE is an automated deployment script that creates a vulnerable Azure cloud lab for offensive security practitioners and enthusiasts…
  ☆106Updated last year
• sbasu7241 / AWS-Threat-Simulation-and-Detection
  Playing around with Stratus Red Team (Cloud Attack simulation tool) and SumoLogic
  ☆302Updated 2 years ago
• Frichetten / SneakyEndpoints
  Hide from the InstanceCredentialExfiltration GuardDuty finding by using VPC Endpoints
  ☆122Updated 3 months ago
• mvelazc0 / PurpleTeamPlaybook
  Active Directory Purple Team Playbook
  ☆113Updated 2 years ago
• iknowjason / AriaCloud
  A Docker container for remote penetration testing.
  ☆141Updated 4 years ago
• microsoft / Azure-Threat-Research-Matrix
  ☆76Updated last year
• unknownhad / CloudIntel
  This repo contains IOC, malware and malware analysis associated with Public cloud
  ☆248Updated 11 months ago
• C0axx / CanaryHunter
  Canary Hunter aims to be a quick PowerShell script to check for Common Canaries in various formats generated for free on canarytokens.org
  ☆123Updated 2 years ago
• ralphte / build_a_phish
  Ansible playbook to deploy a phishing engagement in the cloud.
  ☆221Updated 3 years ago
• SikretaLabs / BlueMap
  A Azure Exploitation Toolkit for Red Team & Pentesters
  ☆164Updated 2 years ago
• wavestone-cdt / DEFCON-CICD-pipelines-workshop
  ☆94Updated 3 years ago
• maddev-engenuity / AdversaryEmulation
  MAD ATT&CK Defender: ATT&CK Adversary Emulation Repository
  ☆121Updated 2 years ago
• elastic / SWAT
  ☆164Updated 3 weeks ago
• vectra-ai-research / Halberd
  Halberd : Multi-Cloud Agentic Attack Tool
  ☆315Updated last month
• TactiKoolSec / OTHF
  Open Threat Hunting Framework
  ☆120Updated 2 years ago
• dahvidschloss / CRASH
  Completely Risky Active-Directory Simulation Hub
  ☆103Updated last year
• Sam0x90 / CTI
  Repo containing various intel-based resources such as threat research, adversary emulation/simulation plan and so on
  ☆83Updated last year
• lutzenfried / OffensiveCloud
  Offensive security and Penetration Testing TTP for Cloud based environment (AWS / Azure / GCP)
  ☆341Updated 7 months ago
• 0xJs / CARTP-cheatsheet
  Azure AD cheatsheet for the CARTP course
  ☆132Updated 3 years ago
• secureworks / PhishInSuits
  ☆116Updated 4 years ago
• carlospolop / aws_iam_review
  ☆39Updated last month
• PhilKeeble / AWS-RedTeam-ADLab
  ☆118Updated 4 years ago
• vectra-ai-research / derf
  DeRF (Detection Replay Framework) is an "Attacks As A Service" framework, allowing the emulation of offensive techniques and generation o…
  ☆102Updated last year