Alternatives and similar repositories for XMGoat

Users that are interested in XMGoat are comparing it to the libraries listed below

• iknowjason / edge
  Recon tool for cloud provider attribution. Supports AWS, Azure, Google, Cloudflare, and Digital Ocean.
  ☆172Updated 10 months ago
• 0xd4y / AWSealion
  A tool to keep AWS pentests and red teams efficient, organized, and stealthy.
  ☆95Updated last year
• SygniaLabs / security-cloud-scout
  ☆139Updated 2 years ago
• joswr1ght / basicblobfinder
  Identify Azure blobs using a wordlist of account name and container name strings
  ☆43Updated 6 months ago
• unknownhad / CloudIntel
  This repo contains IOC, malware and malware analysis associated with Public cloud
  ☆249Updated 10 months ago
• Littlehack3r / awesome-gcp-pentesting
  Tools and blogs I use to perform GCP red teams
  ☆126Updated last year
• gladstomych / AHHHZURE
  AHHHZURE is an automated deployment script that creates a vulnerable Azure cloud lab for offensive security practitioners and enthusiasts…
  ☆105Updated last year
• iknowjason / BlueCloud
  Cyber Range including Velociraptor + HELK system with a Windows VM for security testing and R&D. Azure and AWS terraform support.
  ☆135Updated 2 years ago
• sbasu7241 / AWS-Threat-Simulation-and-Detection
  Playing around with Stratus Red Team (Cloud Attack simulation tool) and SumoLogic
  ☆299Updated 2 years ago
• SikretaLabs / BlueMap
  A Azure Exploitation Toolkit for Red Team & Pentesters
  ☆164Updated 2 years ago
• C0axx / CanaryHunter
  Canary Hunter aims to be a quick PowerShell script to check for Common Canaries in various formats generated for free on canarytokens.org
  ☆121Updated 2 years ago
• ralphte / build_a_phish
  Ansible playbook to deploy a phishing engagement in the cloud.
  ☆220Updated 3 years ago
• facebookincubator / ForgeArmory
  ForgeArmory provides TTPs that can be used with the TTPForge (https://github.com/facebookincubator/ttpforge).
  ☆117Updated 11 months ago
• Frichetten / SneakyEndpoints
  Hide from the InstanceCredentialExfiltration GuardDuty finding by using VPC Endpoints
  ☆122Updated 2 months ago
• NetSPI / gcpwn
  Enumeration/exploit/analysis/download/etc pentesting framework for GCP; modeled like Pacu for AWS; a product of numerous hours via @Webbi…
  ☆260Updated 3 months ago
• mvelazc0 / PurpleTeamPlaybook
  Active Directory Purple Team Playbook
  ☆111Updated 2 years ago
• cyberark / BlobHunter
  Find exposed data in Azure with this public blob scanner
  ☆339Updated last year
• microsoft / Azure-Threat-Research-Matrix
  ☆75Updated last year
• carlospolop / aws_iam_review
  ☆37Updated last month
• wavestone-cdt / DEFCON-CICD-pipelines-workshop
  ☆94Updated 2 years ago
• maddev-engenuity / AdversaryEmulation
  MAD ATT&CK Defender: ATT&CK Adversary Emulation Repository
  ☆119Updated 2 years ago
• secureworks / PhishInSuits
  ☆115Updated 4 years ago
• SySS-Research / azurenum
  Enumerate Microsoft Entra ID (Azure AD) fast
  ☆93Updated 4 months ago
• lutzenfried / OffensiveCloud
  Offensive security and Penetration Testing TTP for Cloud based environment (AWS / Azure / GCP)
  ☆339Updated 6 months ago
• DefensiveOrigins / DO-LAB
  ☆47Updated 5 months ago
• 8ales / Azure-AppHunter
  Azure AppHunter is an open-source tool created for security researchers, red teamers and defenders to help them identify excessive privil…
  ☆82Updated this week
• vectra-ai-research / Halberd
  Halberd : Multi-Cloud Agentic Attack Tool
  ☆306Updated last week
• azurecitadel / azure-security-lab
  Adam Raffe and Tom Wilde's Azure Security Lab
  ☆66Updated 6 years ago
• vectra-ai-research / derf
  DeRF (Detection Replay Framework) is an "Attacks As A Service" framework, allowing the emulation of offensive techniques and generation o…
  ☆102Updated last year
• Sam0x90 / CTI
  Repo containing various intel-based resources such as threat research, adversary emulation/simulation plan and so on
  ☆82Updated last year