Alternatives and similar repositories for waf-detector

Users that are interested in waf-detector are comparing it to the libraries listed below

• ReversecLabs / cloud-security-vm
  Ansible/Vagrant/Packer files to create a virtual machine with the tooling needed to perform cloud security assessments
  ☆142Updated 11 months ago
• saw-your-packet / CloudShovel
  A tool for scanning public or private AMIs for sensitive files and secrets. The tool follows the research made on AWS CloudQuarry where w…
  ☆112Updated last year
• StevenSmiley / aws-mine
  AWS honey token manager
  ☆89Updated last year
• makalin / SecureMCP
  SecureMCP is a security auditing tool designed to detect vulnerabilities and misconfigurations in applications using the [Model Context P…
  ☆132Updated 6 months ago
• Aqua-Nautilus / TrailShark
  ☆53Updated last year
• DataDog / undocumented-aws-api-hunter
  A tool to uncover undocumented APIs from the AWS Console.
  ☆115Updated 7 months ago
• elementsinteractive / twyn
  Security tool against dependency typosquatting attacks
  ☆54Updated this week
• FogSecurity / yes3-scanner
  YES3 Scanner: S3 Security Scanner for Access and Ransomware Protection
  ☆99Updated 4 months ago
• Permiso-io-tools / cloudtail
  ☆31Updated 2 weeks ago
• semgr8ns / semgr8s
  Semgrep-based Policy Controller for Kubernetes
  ☆47Updated 8 months ago
• hazcod / shade
  PoC shadow SaaS and insecure credential detection system using a browser extension.
  ☆42Updated last month
• jstawinski / GitHub-Actions-Attack-Diagram
  ☆193Updated 8 months ago
• DataDog / grimoire
  Generate datasets of cloud audit logs for common attacks
  ☆228Updated last year
• huntresslabs / rogueapps
  When good OAuth apps go rogue. Documents observed OAuth application tradecraft
  ☆82Updated last week
• mbhatt1 / GhostLine
  Feed it a number. Your cloned voice does the social engineering, while you sip your coffee. A ghost that talks on the phone for you.
  ☆107Updated 6 months ago
• guardian-nexus / auditkit
  AuditKit - Multi-Cloud Compliance Scanner & Evidence Collection
  ☆237Updated last week
• adanalvarez / HoneyTrail
  Independently deploy customized honeyservices in AWS to trigger alerts on unauthorized access. It utilizes a dedicated CloudTrail for pre…
  ☆51Updated last year
• tenable / hidden-services-revealer
  ☆39Updated last year
• Permiso-io-tools / LogLicker
  Tool for obfuscating and deobfuscating data.
  ☆75Updated last year
• offensive-actions / terraform-provider-statefile-rce
  This terraform provider can be used to get remote code execution by injecting a dummy resource in a writeable state file.
  ☆59Updated 11 months ago
• FalconForceTeam / dAWShund
  Putting a leash on naughty AWS permissions
  ☆132Updated 3 months ago
• SygniaLabs / Mirage
  ☆75Updated 9 months ago
• adanalvarez / TrailAlerts
  TrailAlerts is a AWS-native, serverless cloud-detection tool that lets you define simple rules as code and get rich alerts about events i…
  ☆51Updated last month
• telophasehq / go-ocsf
  ☆75Updated 2 months ago
• rotemreiss / MalifiScan
  A security tool that detects malicious packages from external vulnerability feeds and searches for them in your package registries or art…
  ☆69Updated 3 weeks ago
• grahamhelton / IMDSpoof
  IMDSPOOF is a cyber deception tool that spoofs the AWS IMDS service to return HoneyTokens that can be alerted on.
  ☆106Updated 2 years ago
• RyanJarv / roles
  Unauthenticated enumeration of AWS IAM Roles.
  ☆26Updated 3 months ago
• elastic / SWAT
  ☆169Updated 2 months ago
• relayhawk / twilio-security-scanner
  ☆22Updated 9 months ago
• anvilsecure / pqcscan
  Post-Quantum Cryptography Scanner - Scan SSH/TLS servers for PQC support
  ☆101Updated last month