aquasecurity / cloud-security-remediation-guides

Related projects ⓘ

Alternatives and complementary repositories for cloud-security-remediation-guides

• nccgroup / sadcloud
  A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure
  ☆656Updated last year
• BishopFox / iam-vulnerable
  Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.
  ☆476Updated 9 months ago
• awslabs / aws-security-assessment-solution
  An AWS tool to help you create a point in time assessment of your AWS account using Prowler.
  ☆515Updated this week
• Funkmyster / awesome-cloud-security
  A curated list of awesome cloud security blogs, podcasts, standards, projects, and examples.
  ☆579Updated last year
• jassics / awesome-aws-security
  Curated list of links, references, books videos, tutorials (Free or Paid), Exploit, CTFs, Hacking Practices etc. which are related to AWS…
  ☆1,263Updated last month
• OWASP / DevSecOpsGuideline
  The OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.
  ☆846Updated 3 months ago
• hashishrajan / cloud-security-vulnerabilities
  List of all the Publicly disclosed vulnerabilities of Public Cloud Provider like Amazon Web Services (AWS), Microsoft Azure, Google Cloud…
  ☆357Updated last year
• cider-security-research / top-10-cicd-security-risks
  ☆399Updated last year
• rung / threat-matrix-cicd
  Threat matrix for CI/CD Pipeline
  ☆739Updated 4 months ago
• krol3 / container-security-checklist
  Checklist for container security - devsecops practices
  ☆1,520Updated last year
• jonrau1 / ElectricEye
  ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring su…
  ☆936Updated this week
• OpenCSPM / opencspm
  Open Cloud Security Posture Management Engine
  ☆333Updated 2 years ago
• tenable / KaiMonkey
  KaiMonkey provides vulnerable infrastructure as code (IaC) to help explore and understand common cloud security threats exposed via IaC.
  ☆96Updated 10 months ago
• ine-labs / GCPGoat
  GCPGoat : A Damn Vulnerable GCP Infrastructure
  ☆357Updated last week
• tenable / cnappgoat
  CNAPPgoat is an open source project designed to modularly provision vulnerable-by-design components in cloud environments.
  ☆266Updated 2 months ago
• CyberSecurityUP / Cloud-Security-Attacks
  Azure and AWS Attacks
  ☆1,047Updated last year
• joshlarsen / aws-recon
  Multi-threaded AWS inventory collection tool with a focus on security-relevant resources and metadata.
  ☆528Updated 6 months ago
• Hacking-the-Cloud / hackingthe.cloud
  An encyclopedia for offensive and defensive security knowledge in cloud native technologies.
  ☆1,706Updated this week
• c0rdis / security-champions-playbook
  Security Champions Playbook v 2.1
  ☆347Updated last year
• ine-labs / AWSGoat
  AWSGoat : A Damn Vulnerable AWS Infrastructure
  ☆1,732Updated last week
• domain-protect / domain-protect
  OWASP Domain Protect - prevent subdomain takeover
  ☆397Updated last month
• SummitRoute / csp_security_mistakes
  This repo has been replaced by https://www.cloudvulndb.org
  ☆718Updated 2 years ago
• RhinoSecurityLabs / GCP-IAM-Privilege-Escalation
  A collection of GCP IAM privilege escalation methods documented by the Rhino Security Labs team.
  ☆341Updated 6 months ago
• ramimac / aws-customer-security-incidents
  A repository of breaches of AWS customers
  ☆705Updated last week
• BishopFox / cloudfox
  Automating situational awareness for cloud penetration tests.
  ☆1,930Updated 3 weeks ago
• devsecopsmaturitymodel / DevSecOps-MaturityModel
  ☆491Updated 3 weeks ago
• ine-labs / AzureGoat
  AzureGoat : A Damn Vulnerable Azure Infrastructure
  ☆779Updated last week
• pop3ret / AWSome-Pentesting
  My cheatsheet notes to pentest AWS infrastructure
  ☆655Updated 2 years ago
• aws-samples / aws-customer-playbook-framework
  This repository provides sample templates for security playbooks against various scenarios when using Amazon Web Services.
  ☆540Updated this week