Alternatives and similar repositories for secure-serverless-reference-architecture

Users that are interested in secure-serverless-reference-architecture are comparing it to the libraries listed below

• Frichetten / aws_api_shapeshifter
  A small library to alter AWS API requests; Used for fuzzing research
  ☆22Updated last year
• hotnops / AWSRoleJuggler
  A toolset to juggle AWS roles for persistent access
  ☆57Updated 9 months ago
• avishayil / cdk-goat
  Vulnerable by Design AWS Cloud Development Kit (CDK) Infrastructure
  ☆47Updated last year
• ghostsecurity / waf-btk
  WAF bypass PoC
  ☆48Updated last year
• doyensec / PoiEx
  🌐 Visualize and explore IaC ✒️ Create and share notes in VS Code 🤝 Sync notes and findings in real-time with friends
  ☆73Updated last year
• lightspin-tech / red-detector
  Scan your EC2 instance to find its vulnerabilities using Vuls (https://vuls.io/en/)
  ☆88Updated 2 years ago
• benbridts / aws-undocumented-api-models
  Model files for undocumented AWS APIs
  ☆13Updated 11 months ago
• NotSoSecure / cloud-sec-wiki
  Jekyll Files for cloudsecwiki.com
  ☆50Updated 3 years ago
• AbstractClass / CloudPrivs
  Determine privileges from cloud credentials via brute-force testing.
  ☆69Updated 9 months ago
• Permiso-io-tools / SkyScalpel
  ☆41Updated 6 months ago
• sebastian-mora / awsssome_phish
  AWS SSO serverless phishing API.
  ☆32Updated 3 years ago
• ncc-erik-steringer / Aerides
  An implementation of infrastructure-as-code scanning using dynamic tooling.
  ☆56Updated 3 years ago
• gojek / CureIAM
  Clean accounts over permissions in GCP infra at scale
  ☆71Updated 2 years ago
• praetorian-inc / konstellation
  Konstellation is a configuration-driven CLI tool to enumerate cloud resources and store the data into Neo4j.
  ☆21Updated last year
• lightspin-tech / red-shadow
  Lightspin AWS IAM Vulnerability Scanner
  ☆96Updated 4 years ago
• ramimac / breach-list-database
  A meta-database collecting resources that compile lists of breaches
  ☆20Updated 7 months ago
• JupiterOne-Archives / j1nuclei
  ☆14Updated last year
• offensive-terraform / offensive-terraform.github.io
  Offensive Terraform Website
  ☆44Updated 4 years ago
• ReversecLabs / encap-attack
  Sniff and attack networks that use IP-in-IP or VXLAN encapsulation protocols.
  ☆21Updated 9 months ago
• tenchi-security / camp
  CloudSplaining on AWS Managed Policies
  ☆43Updated this week
• doyensec / cloudsec-tidbits
  Blogpost series showcasing interesting cloud - web app security bugs
  ☆49Updated last year
• Rezonate-io / github-oidc-checker
  Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts
  ☆61Updated 2 years ago
• crypsisgroup / ebs-direct-sec-tools
  Fun tools around the EBS Direct API
  ☆18Updated 4 years ago
• disruptops / assess_network
  Assess certain AWS network configurations
  ☆12Updated 6 years ago
• sebastian-mora / AWS-Loot
  Pull secrets from an AWS environment
  ☆70Updated 5 years ago
• SummitRoute / isolated_network_experiment
  CDK app to setup an isolated AWS network to experiment with ways of exfiltrating data
  ☆18Updated 3 years ago
• tenable / hidden-services-revealer
  ☆36Updated 10 months ago
• messypoutine / gravy-overflow
  A GitHub Actions Supply Chain CTF / Goat
  ☆19Updated last week
• vectra-ai-research / log4j-aws-sandbox
  A set of AWS resources for testing the Log4Shell vulnerability, deployable with terraform
  ☆12Updated 3 years ago
• carlospolop / Cloudtrail2IAM
  ☆21Updated 2 years ago