kmcquade / terraform-deployment-pentesting
Bits of Terraform that you can use to do bad things in CI/CD pipelines that run Terraform
☆10Updated 4 years ago
Alternatives and similar repositories for terraform-deployment-pentesting:
Users that are interested in terraform-deployment-pentesting are comparing it to the libraries listed below
- GCP CSPM using Google Sheets☆34Updated 8 months ago
- 🖇️ STRIDE vs. ASVS equivalence table☆75Updated 5 months ago
- Audit log wall of shame.☆41Updated 4 months ago
- Knowledge Report Alert & Normalization Generator☆27Updated 11 months ago
- Compares and analyzes GCP IAM roles.☆77Updated 8 months ago
- ☆65Updated 9 months ago
- Convert cloudtrail data to MITRE ATT&CK Sightings☆79Updated 2 years ago
- Slack bot which promotes Defense in Depth/Zero Trust security practices☆24Updated 2 years ago
- Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows☆82Updated last week
- AWS EKS Cluster Forensics☆23Updated 3 years ago
- ☆14Updated 2 years ago
- An implementation of infrastructure-as-code scanning using dynamic tooling.☆56Updated 3 years ago
- Tooling to simulate runtime attacks and test default runtime detections from Datadog Cloud Security Management.☆30Updated 4 months ago
- Automation associated with our talk: Attacking and Defending Infrastructure with Terraform☆16Updated 2 years ago
- ☆28Updated 4 years ago
- pocket guide for core detection engineering concepts☆27Updated last year
- Updated incident response generator for training classes☆43Updated 3 years ago
- Holds the public Hacking the Cloud CTFs.☆54Updated 11 months ago
- A CLI that scans for sensitive data in source code☆13Updated last year
- Independently deploy customized honeyservices in AWS to trigger alerts on unauthorized access. It utilizes a dedicated CloudTrail for pre…☆48Updated 3 months ago
- IAMFinder enumerates and finds users and IAM roles in a target AWS account.☆110Updated 4 years ago
- Whitebox evaluation of effective S3 object permissions, to identify publicly accessible files.☆76Updated 2 years ago
- Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts☆60Updated last year
- DeRF (Detection Replay Framework) is an "Attacks As A Service" framework, allowing the emulation of offensive techniques and generation o…☆91Updated last year
- Clean accounts over permissions in GCP infra at scale☆71Updated last year
- Protect against subdomain takeover☆92Updated 8 months ago
- AWS SSO serverless phishing API.☆31Updated 3 years ago
- Generates runbooks for GuardDuty findings☆35Updated 7 months ago
- These are tools we released with our 2020 defcon/blackhat talk https://www.youtube.com/watch?v=Ml09R38jpok☆170Updated 2 weeks ago