Alternatives and similar repositories for cloud-security-vulnerabilities

Users that are interested in cloud-security-vulnerabilities are comparing it to the libraries listed below

• tenable / cnappgoat
  CNAPPgoat is an open source project designed to modularly provision vulnerable-by-design components in cloud environments.
  ☆285Updated 8 months ago
• wiz-sec / open-cvdb
  An open project to list all publicly known cloud vulnerabilities and CSP security issues
  ☆345Updated last week
• NextSecurity / Awesome-Cloud-Security
  Awesome curate list of cyber security penetration testing tools for Cloud Security mainly AWS/Azure/Google
  ☆124Updated 4 years ago
• aquasecurity / cloud-security-remediation-guides
  Security Remediation Guides
  ☆725Updated 3 months ago
• BishopFox / iam-vulnerable
  Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.
  ☆500Updated last year
• cider-security-research / top-10-cicd-security-risks
  ☆415Updated 2 years ago
• ine-labs / GCPGoat
  GCPGoat : A Damn Vulnerable GCP Infrastructure
  ☆389Updated 7 months ago
• lutzenfried / OffensiveCloud
  Offensive security and Penetration Testing TTP for Cloud based environment (AWS / Azure / GCP)
  ☆333Updated 2 months ago
• ine-labs / AzureGoat
  AzureGoat : A Damn Vulnerable Azure Infrastructure
  ☆848Updated 7 months ago
• Funkmyster / awesome-cloud-security
  A curated list of awesome cloud security blogs, podcasts, standards, projects, and examples.
  ☆605Updated last week
• sbasu7241 / AWS-Threat-Simulation-and-Detection
  Playing around with Stratus Red Team (Cloud Attack simulation tool) and SumoLogic
  ☆296Updated 2 years ago
• CyberSecurityUP / Cloud-Security-Attacks
  Azure and AWS Attacks
  ☆1,101Updated 2 years ago
• BishopFox / cloudfoxable
  Create your own vulnerable by design AWS penetration testing playground
  ☆375Updated last month
• RhinoSecurityLabs / IAMActionHunter
  An AWS IAM policy statement parser and query tool.
  ☆182Updated last year
• RyanJarv / awesome-cloud-sec
  Awesome list for cloud security related projects
  ☆127Updated 2 years ago
• wiz-sec-public / cloud-middleware-dataset
  ☆243Updated 10 months ago
• cyprosecurity / API-SecurityEmpire
  API Security Project aims to present unique attack & defense methods in API Security field
  ☆284Updated 3 years ago
• SummitRoute / csp_security_mistakes
  This repo has been replaced by https://www.cloudvulndb.org
  ☆726Updated 2 years ago
• TROUBLE-1 / Cloud-Pentesting
  This repository is in progress, it will keep updating as I come across to new learning materials. Feel free to contribute.
  ☆222Updated 2 years ago
• pop3ret / AWSome-Pentesting
  My cheatsheet notes to pentest AWS infrastructure
  ☆676Updated 2 years ago
• jassics / security-interview-questions
  Security interview questions with possible explanation for roles in AppSec, Pentesting, Cloud Security, DevSecOps, Network Security and s…
  ☆349Updated 5 months ago
• RhinoSecurityLabs / GCP-IAM-Privilege-Escalation
  A collection of GCP IAM privilege escalation methods documented by the Rhino Security Labs team.
  ☆385Updated last year
• nccgroup / sadcloud
  A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure
  ☆708Updated last year
• DataDog / security-labs-pocs
  Proof of concept code for Datadog Security Labs referenced exploits.
  ☆439Updated 2 months ago
• unknownhad / CloudIntel
  This repo contains IOC, malware and malware analysis associated with Public cloud
  ☆248Updated 6 months ago
• trustoncloud / threatmodel-for-aws-s3
  ThreatModel for Amazon S3 - Library of all the attack scenarios on Amazon S3, and how to mitigate them following a risk-based approach
  ☆153Updated last year
• tenable / KaiMonkey
  KaiMonkey provides vulnerable infrastructure as code (IaC) to help explore and understand common cloud security threats exposed via IaC.
  ☆101Updated last year
• righteousgambit / quiet-riot
  Unauthenticated enumeration of AWS, Azure, and GCP Principals
  ☆231Updated 6 months ago
• awslabs / aws-automated-incident-response-and-forensics
  ☆387Updated last year
• Nextdoor / cspm_evaluation_matrix
  Nextdoor's Cloud Security Posture Management (CSPM) Evaluation Matrix
  ☆58Updated last year