anunay-bhatt / secure-serverless-reference-architecture
A walkthrough of security controls for a serverless architecture via a demo application
☆11Updated 2 years ago
Alternatives and similar repositories for secure-serverless-reference-architecture:
Users that are interested in secure-serverless-reference-architecture are comparing it to the libraries listed below
- A meta-database collecting resources that compile lists of breaches☆18Updated 2 months ago
- Offensive Terraform Website☆44Updated 4 years ago
- A toolset to juggle AWS roles for persistent access☆53Updated 5 months ago
- Scan your EC2 instance to find its vulnerabilities using Vuls (https://vuls.io/en/)☆88Updated 2 years ago
- A small library to alter AWS API requests; Used for fuzzing research☆22Updated last year
- ☆10Updated 2 years ago
- Lightspin AWS IAM Vulnerability Scanner☆96Updated 3 years ago
- Vulnerable by Design AWS Cloud Development Kit (CDK) Infrastructure☆46Updated last year
- Fun tools around the EBS Direct API☆18Updated 3 years ago
- An implementation of infrastructure-as-code scanning using dynamic tooling.☆55Updated 3 years ago
- A set of AWS resources for testing the Log4Shell vulnerability, deployable with terraform☆12Updated 3 years ago
- Pull secrets from an AWS environment☆70Updated 4 years ago
- Determine privileges from cloud credentials via brute-force testing.☆66Updated 5 months ago
- WAF bypass PoC☆46Updated last year
- ☆33Updated 2 years ago
- ☆21Updated 7 months ago
- AWS SSO serverless phishing API.☆31Updated 3 years ago
- Clean accounts over permissions in GCP infra at scale☆71Updated last year
- ☆14Updated last year
- Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts☆60Updated last year
- ☆31Updated 2 months ago
- CloudSplaining on AWS Managed Policies☆41Updated this week
- Konstellation is a configuration-driven CLI tool to enumerate cloud resources and store the data into Neo4j.☆19Updated last year
- ☆21Updated last year
- ☆58Updated last year
- CDK app to setup an isolated AWS network to experiment with ways of exfiltrating data☆18Updated 3 years ago
- OWASP Foundation Web Respository☆34Updated 4 months ago
- A combined list of helpful awscli commands from Scott Piper's flaws.cloud exercise as well as from Beau Bullock's Breaching the Cloud Tra…☆19Updated 3 years ago
- Jekyll Files for cloudsecwiki.com☆50Updated 3 years ago
- Research on the enumeration of IAM permissions without logging to CloudTrail☆60Updated 3 years ago