Alternatives and similar repositories for cloud-security-vulnerabilities:

Users that are interested in cloud-security-vulnerabilities are comparing it to the libraries listed below

• tenable / cnappgoat
  CNAPPgoat is an open source project designed to modularly provision vulnerable-by-design components in cloud environments.
  ☆280Updated 8 months ago
• cider-security-research / top-10-cicd-security-risks
  ☆409Updated 2 years ago
• wiz-sec / open-cvdb
  An open project to list all publicly known cloud vulnerabilities and CSP security issues
  ☆342Updated last month
• RhinoSecurityLabs / IAMActionHunter
  An AWS IAM policy statement parser and query tool.
  ☆177Updated last year
• NextSecurity / Awesome-Cloud-Security
  Awesome curate list of cyber security penetration testing tools for Cloud Security mainly AWS/Azure/Google
  ☆124Updated 4 years ago
• BishopFox / iam-vulnerable
  Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.
  ☆499Updated last year
• wiz-sec-public / cloud-middleware-dataset
  ☆242Updated 10 months ago
• ine-labs / GCPGoat
  GCPGoat : A Damn Vulnerable GCP Infrastructure
  ☆384Updated 6 months ago
• aquasecurity / cloud-security-remediation-guides
  Security Remediation Guides
  ☆724Updated 3 months ago
• lutzenfried / OffensiveCloud
  Offensive security and Penetration Testing TTP for Cloud based environment (AWS / Azure / GCP)
  ☆329Updated 2 months ago
• DataDog / security-labs-pocs
  Proof of concept code for Datadog Security Labs referenced exploits.
  ☆436Updated last month
• BishopFox / cloudfoxable
  Create your own vulnerable by design AWS penetration testing playground
  ☆372Updated 2 weeks ago
• pop3ret / AWSome-Pentesting
  My cheatsheet notes to pentest AWS infrastructure
  ☆674Updated 2 years ago
• Funkmyster / awesome-cloud-security
  A curated list of awesome cloud security blogs, podcasts, standards, projects, and examples.
  ☆605Updated last year
• SummitRoute / csp_security_mistakes
  This repo has been replaced by https://www.cloudvulndb.org
  ☆725Updated 2 years ago
• sbasu7241 / AWS-Threat-Simulation-and-Detection
  Playing around with Stratus Red Team (Cloud Attack simulation tool) and SumoLogic
  ☆296Updated 2 years ago
• trustoncloud / threatmodel-for-aws-s3
  ThreatModel for Amazon S3 - Library of all the attack scenarios on Amazon S3, and how to mitigate them following a risk-based approach
  ☆153Updated last year
• ine-labs / AzureGoat
  AzureGoat : A Damn Vulnerable Azure Infrastructure
  ☆841Updated 6 months ago
• righteousgambit / quiet-riot
  Unauthenticated enumeration of AWS, Azure, and GCP Principals
  ☆229Updated 5 months ago
• RyanJarv / awesome-cloud-sec
  Awesome list for cloud security related projects
  ☆127Updated 2 years ago
• CyberSecurityUP / Cloud-Security-Attacks
  Azure and AWS Attacks
  ☆1,105Updated 2 years ago
• RhinoSecurityLabs / GCP-IAM-Privilege-Escalation
  A collection of GCP IAM privilege escalation methods documented by the Rhino Security Labs team.
  ☆381Updated last year
• redskycyber / Cloud-Security
  This Repo serves as a collection of shared security and penetration testing resources for the cloud.
  ☆267Updated 9 months ago
• awslabs / aws-automated-incident-response-and-forensics
  ☆386Updated last year
• TROUBLE-1 / Cloud-Pentesting
  This repository is in progress, it will keep updating as I come across to new learning materials. Feel free to contribute.
  ☆221Updated 2 years ago
• cyprosecurity / API-SecurityEmpire
  API Security Project aims to present unique attack & defense methods in API Security field
  ☆284Updated 3 years ago
• unknownhad / CloudIntel
  This repo contains IOC, malware and malware analysis associated with Public cloud
  ☆249Updated 5 months ago
• brianlam38 / AWS-Certified-Security-Specialty
  AWS Certified Security Specialty (2020) course notes
  ☆119Updated 4 years ago
• rung / threat-matrix-cicd
  Threat matrix for CI/CD Pipeline
  ☆750Updated 10 months ago
• jatrost / awesome-kubernetes-threat-detection
  A curated list of resources about detecting threats and defending Kubernetes systems.
  ☆377Updated last year