Alternatives and similar repositories for AWSGoat

Users that are interested in AWSGoat are comparing it to the libraries listed below

• BishopFox / cloudfox
  Automating situational awareness for cloud penetration tests.
  ☆2,270Updated this week
• CyberSecurityUP / Cloud-Security-Attacks
  Azure and AWS Attacks
  ☆1,107Updated 3 years ago
• iknowjason / Awesome-CloudSec-Labs
  Awesome free cloud native security learning labs. Includes CTF, self-hosted workshops, guided vulnerability labs, and research labs.
  ☆1,804Updated 3 months ago
• Hacking-the-Cloud / hackingthe.cloud
  An encyclopedia for offensive and defensive security knowledge in cloud native technologies.
  ☆2,467Updated last week
• pop3ret / AWSome-Pentesting
  My cheatsheet notes to pentest AWS infrastructure
  ☆700Updated 3 years ago
• ine-labs / AzureGoat
  AzureGoat : A Damn Vulnerable Azure Infrastructure
  ☆908Updated last year
• cider-security-research / cicd-goat
  A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
  ☆2,174Updated last year
• 4ndersonLin / awesome-cloud-security
  🛡️ Awesome Cloud Security Resources ⚔️
  ☆2,339Updated last year
• jassics / awesome-aws-security
  Curated list of links, references, books videos, tutorials (Free or Paid), Exploit, CTFs, Hacking Practices etc. which are related to AWS…
  ☆1,477Updated 8 months ago
• aquasecurity / cloud-security-remediation-guides
  Security Remediation Guides
  ☆742Updated last month
• RhinoSecurityLabs / cloudgoat
  CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
  ☆3,445Updated 2 months ago
• BishopFox / cloudfoxable
  Create your own vulnerable by design AWS penetration testing playground
  ☆410Updated 2 weeks ago
• erev0s / VAmPI
  Vulnerable REST API with OWASP top 10 vulnerabilities for security testing
  ☆1,158Updated last year
• BishopFox / iam-vulnerable
  Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.
  ☆537Updated 4 months ago
• nccgroup / sadcloud
  A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure
  ☆746Updated 2 years ago
• dafthack / CloudPentestCheatsheets
  This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage clou…
  ☆2,782Updated last year
• DataDog / stratus-red-team
  Granular, Actionable Adversary Emulation for the Cloud
  ☆2,223Updated this week
• krol3 / container-security-checklist
  Checklist for container security - devsecops practices
  ☆1,611Updated 4 months ago
• roottusk / vapi
  vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios through Exercises.
  ☆1,321Updated last year
• Funkmyster / awesome-cloud-security
  A curated list of awesome cloud security blogs, podcasts, standards, projects, and examples.
  ☆652Updated 7 months ago
• CyberSecurityUP / Awesome-Cloud-PenTest
  ☆751Updated 3 years ago
• ine-labs / GCPGoat
  GCPGoat : A Damn Vulnerable GCP Infrastructure
  ☆426Updated last year
• HackTricks-wiki / hacktricks-cloud
  ☆720Updated this week
• ramimac / aws-customer-security-incidents
  A repository of breaches of AWS customers
  ☆792Updated 2 months ago
• Kyuu-Ji / Awesome-Azure-Pentest
  A collection of resources, tools and more for penetration testing and securing Microsofts cloud platform Azure.
  ☆1,173Updated 2 years ago
• RhinoSecurityLabs / pacu
  The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
  ☆5,030Updated 2 months ago
• carlospolop / PurplePanda
  Identify privilege escalation paths within and across different clouds
  ☆711Updated last week
• 6mile / DevSecOps-Playbook
  This is a step-by-step guide to implementing a DevSecOps program for any size organization
  ☆2,023Updated last year
• initstring / cloud_enum
  Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.
  ☆1,988Updated 6 months ago
• OWASP / DevSecOpsGuideline
  The OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.
  ☆1,006Updated last week