Alternatives and similar repositories for secure-serverless-reference-architecture

Users that are interested in secure-serverless-reference-architecture are comparing it to the libraries listed below

• hotnops / AWSRoleJuggler
  A toolset to juggle AWS roles for persistent access
  ☆57Updated 10 months ago
• vectra-ai-research / log4j-aws-sandbox
  A set of AWS resources for testing the Log4Shell vulnerability, deployable with terraform
  ☆12Updated 3 years ago
• avishayil / cdk-goat
  Vulnerable by Design AWS Cloud Development Kit (CDK) Infrastructure
  ☆47Updated last year
• Frichetten / aws_api_shapeshifter
  A small library to alter AWS API requests; Used for fuzzing research
  ☆22Updated last year
• ramimac / breach-list-database
  A meta-database collecting resources that compile lists of breaches
  ☆20Updated 7 months ago
• crypsisgroup / ebs-direct-sec-tools
  Fun tools around the EBS Direct API
  ☆18Updated 4 years ago
• benbridts / aws-undocumented-api-models
  Model files for undocumented AWS APIs
  ☆13Updated 11 months ago
• ghostsecurity / waf-btk
  WAF bypass PoC
  ☆48Updated last year
• offensive-terraform / offensive-terraform.github.io
  Offensive Terraform Website
  ☆45Updated 4 years ago
• lightspin-tech / red-bucket-gcp
  ☆10Updated 3 years ago
• lightspin-tech / red-shadow
  Lightspin AWS IAM Vulnerability Scanner
  ☆96Updated 4 years ago
• latacora / remediate-AWS-IMDSv1
  Simple tool to identify and remediate the use of the AWS EC2 IMDSv1.
  ☆16Updated 3 years ago
• OpenCSPM / opencspm-darkbit-community-controls
  OpenCSPM Community Controls
  ☆14Updated 4 years ago
• Permiso-io-tools / SkyScalpel
  ☆45Updated 7 months ago
• tenchi-security / camp
  CloudSplaining on AWS Managed Policies
  ☆43Updated this week
• cedowens / aws-cli-notes
  A combined list of helpful awscli commands from Scott Piper's flaws.cloud exercise as well as from Beau Bullock's Breaching the Cloud Tra…
  ☆19Updated 4 years ago
• doyensec / PoiEx
  🌐 Visualize and explore IaC ✒️ Create and share notes in VS Code 🤝 Sync notes and findings in real-time with friends
  ☆73Updated last year
• blackbotsecurity / AWS-Attack
  AWSATT&CK adds MITRE ATT&CK context and additional logging capabilities to Rhino Security Labs's open-source AWS exploitation framework, …
  ☆45Updated 4 years ago
• AbstractClass / CloudPrivs
  Determine privileges from cloud credentials via brute-force testing.
  ☆69Updated 10 months ago
• JupiterOne-Archives / j1nuclei
  ☆14Updated last year
• gojek / CureIAM
  Clean accounts over permissions in GCP infra at scale
  ☆71Updated 2 years ago
• modulexcite / attacking-and-auditing-docker-containers-and-kubernetes-clusters
  Appsecco training course content on Attacking and Auditing Dockers Containers and Kubernetes Clusters
  ☆14Updated 5 years ago
• carlospolop / Cloudtrail2IAM
  ☆22Updated 2 years ago
• ncc-erik-steringer / Aerides
  An implementation of infrastructure-as-code scanning using dynamic tooling.
  ☆56Updated 3 years ago
• GoogleCloudPlatform / assured-workloads-terraform
  ☆16Updated 10 months ago
• ReversecLabs / encap-attack
  Sniff and attack networks that use IP-in-IP or VXLAN encapsulation protocols.
  ☆21Updated 9 months ago
• disruptops / assess_network
  Assess certain AWS network configurations
  ☆12Updated 6 years ago
• lightspin-tech / red-detector
  Scan your EC2 instance to find its vulnerabilities using Vuls (https://vuls.io/en/)
  ☆88Updated 2 years ago
• ayushpriya10 / IMDShift
  ☆56Updated 2 years ago
• StateFarmIns / CLAWS
  This application was built to help reduce the amount of time it takes to review AWS Lambda code.
  ☆60Updated 7 months ago