carnal0wnage / weirdAAL

Related projects ⓘ

Alternatives and complementary repositories for weirdAAL

• RhinoSecurityLabs / AWS-IAM-Privilege-Escalation
  A centralized source of all AWS IAM privilege escalation methods released by Rhino Security Labs.
  ☆896Updated 5 years ago
• RhinoSecurityLabs / Security-Research
  Exploits written by the Rhino Security Labs team
  ☆1,059Updated 3 years ago
• dagrz / aws_pwn
  A collection of AWS penetration testing junk
  ☆1,173Updated last year
• RhinoSecurityLabs / ccat
  Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.
  ☆588Updated 4 years ago
• andresriancho / nimbostratus
  Tools for fingerprinting and exploiting Amazon cloud infrastructures
  ☆445Updated last year
• RhinoSecurityLabs / Cloud-Security-Research
  Cloud-related research releases from the Rhino Security Labs team.
  ☆355Updated 4 years ago
• WithSecureLabs / awspx
  A graph-based tool for visualizing effective access and resource relationships in AWS environments.
  ☆920Updated 2 years ago
• nccgroup / sadcloud
  A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure
  ☆656Updated last year
• RhinoSecurityLabs / GCPBucketBrute
  A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.
  ☆482Updated last year
• andresriancho / enumerate-iam
  Enumerate the permissions associated with AWS credential set
  ☆1,090Updated 9 months ago
• Voulnet / barq
  barq: The AWS Cloud Post Exploitation framework!
  ☆386Updated last year
• MindPointGroup / cloudfrunt
  A tool for identifying misconfigured CloudFront domains
  ☆345Updated 4 years ago
• BishopFox / dufflebag
  Search exposed EBS volumes for secrets
  ☆285Updated last year
• WithSecureLabs / leonidas
  Automated Attack Simulation in the Cloud, complete with detection use cases.
  ☆485Updated 2 months ago
• jordanpotti / AWSBucketDump
  Security Tool to Look For Interesting Files in S3 Buckets
  ☆1,364Updated 6 months ago
• WeAreCloudar / s3-account-search
  S3 Account Search
  ☆245Updated 3 weeks ago
• stuhirst / awssecurity
  for AWS Security material
  ☆245Updated 2 years ago
• BishopFox / iam-vulnerable
  Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.
  ☆477Updated 9 months ago
• nagwww / s3-leaks
  List of S3 Hacks
  ☆381Updated 11 months ago
• BishopFox / smogcloud
  Find cloud assets that no one wants exposed 🔎 ☁️
  ☆332Updated 4 years ago
• koenrh / s3enum
  Fast and stealthy Amazon S3 bucket enumeration tool for pentesters.
  ☆227Updated this week
• pumasecurity / serverless-prey
  Serverless Functions for establishing Reverse Shells to Lambda, Azure Functions, and Google Cloud Functions
  ☆235Updated 3 weeks ago
• OWASP / DVSA
  a Damn Vulnerable Serverless Application
  ☆534Updated last year
• SummitRoute / aws_exposable_resources
  Resource types that can be publicly exposed on AWS
  ☆316Updated 2 years ago
• mykter / aws-security-cert-service-notes
  Security aspects of AWS products for the Security Specialist certification
  ☆208Updated 2 years ago
• nccgroup / PMapper
  A tool for quickly evaluating IAM permissions in AWS.
  ☆1,430Updated 3 months ago
• magoo / redteam-plan
  Issues to consider when planning a red team exercise.
  ☆611Updated 7 years ago
• opendevsecops / guide-aws-hacking
  This is an offensive guide to securing AWS infrastructures. The hope is that by knowing how to take advantage of various types of AWS wea…
  ☆168Updated 5 years ago
• joshlarsen / aws-recon
  Multi-threaded AWS inventory collection tool with a focus on security-relevant resources and metadata.
  ☆528Updated 6 months ago