List of all the Publicly disclosed vulnerabilities of Public Cloud Provider like Amazon Web Services (AWS), Microsoft Azure, Google Cloud, Oracle Cloud, IBM Cloud etc
☆373May 4, 2023Updated 3 years ago
Alternatives and similar repositories for cloud-security-vulnerabilities
Users that are interested in cloud-security-vulnerabilities are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Azure and AWS Attacks☆1,121Nov 25, 2022Updated 3 years ago
- ☆19Jul 9, 2022Updated 3 years ago
- 🛡️ Awesome Cloud Security Resources ⚔️☆2,419Mar 17, 2026Updated 2 months ago
- Checklist for container security - devsecops practices☆1,617Sep 15, 2025Updated 8 months ago
- An encyclopedia for offensive and defensive security knowledge in cloud native technologies.☆2,666May 5, 2026Updated 2 weeks ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Automating situational awareness for cloud penetration tests.☆2,382Apr 21, 2026Updated last month
- This repo has been replaced by https://www.cloudvulndb.org☆725Jun 29, 2022Updated 3 years ago
- ☆760Aug 26, 2022Updated 3 years ago
- 近年来容器安全相关论文收集整理☆15May 26, 2023Updated 2 years ago
- A step-by-step walkthrough of CloudGoat 2.0 scenarios.☆136Apr 28, 2020Updated 6 years ago
- Awesome free cloud native security learning labs. Includes CTF, self-hosted workshops, guided vulnerability labs, and research labs.☆1,965Oct 1, 2025Updated 7 months ago
- AzureGoat : A Damn Vulnerable Azure Infrastructure☆937Oct 30, 2024Updated last year
- Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.☆569Mar 12, 2026Updated 2 months ago
- Awesome list of step by step techniques to achieve Remote Code Execution on various apps!☆1,947Oct 7, 2023Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- port+dir+param bruteforcing at the same time using ffuf☆17Jul 27, 2024Updated last year
- Azure Security Resources and Notes☆1,747Feb 17, 2026Updated 3 months ago
- This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and …☆2,522Apr 20, 2026Updated last month
- ☆44Oct 16, 2025Updated 7 months ago
- AWSGoat : A Damn Vulnerable AWS Infrastructure☆2,018May 20, 2025Updated last year
- A repository of breaches of AWS customers☆803Mar 30, 2026Updated last month
- A curated list of resources for learning web3 hacking/Security☆202Jan 19, 2023Updated 3 years ago
- A curated list of awesome cloud security blogs, podcasts, standards, projects, and examples.☆664May 20, 2025Updated last year
- My cheatsheet notes to pentest AWS infrastructure☆708Oct 17, 2022Updated 3 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Granular, Actionable Adversary Emulation for the Cloud☆2,326Updated this week
- Curated list of links, references, books videos, tutorials (Free or Paid), Exploit, CTFs, Hacking Practices etc. which are related to AWS…☆1,559Apr 3, 2026Updated last month
- Assisted Log Enabler for AWS - Find AWS resources that are not logging, and turn them on.☆274Updated this week
- Based on Lightspin proprietary data, research, and our tracking of cloud security trends in the market, our research team has compiled a …☆39Aug 8, 2022Updated 3 years ago
- 🚨ATTENTION🚨 The Security Stack Mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is k…☆387Apr 3, 2024Updated 2 years ago
- PoC for CVE-2022-24342: account takeover via CSRF in GitHub authentication☆37Jul 5, 2022Updated 3 years ago
- Awesome cloud enumerator☆1,123Mar 9, 2025Updated last year
- Community Security Analytics provides a set of community-driven audit & threat queries for Google Cloud☆367Jun 12, 2024Updated last year
- Cloudlist is a tool for listing Assets from multiple Cloud Providers.☆1,025May 4, 2026Updated 3 weeks ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.☆5,194Updated this week
- Mind-Maps of Several Things☆2,697Jun 29, 2023Updated 2 years ago
- tools to find xss in a website☆59Apr 27, 2022Updated 4 years ago
- ☆754Jun 26, 2024Updated last year
- Threat matrix for CI/CD Pipeline☆769Jul 8, 2024Updated last year
- Scripts and misc. stuff related to the PortSwigger Web Academy☆17Feb 6, 2022Updated 4 years ago
- Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.☆651Nov 21, 2019Updated 6 years ago