nccgroup / ScoutSuite

Related projects ⓘ

Alternatives and complementary repositories for ScoutSuite

• RhinoSecurityLabs / pacu
  The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
  ☆4,399Updated this week
• aquasecurity / cloudsploit
  Cloud Security Posture Management (CSPM)
  ☆3,358Updated this week
• prowler-cloud / prowler
  Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, complia…
  ☆10,856Updated this week
• toniblyx / my-arsenal-of-aws-security-tools
  List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
  ☆8,978Updated 3 weeks ago
• Hacking-the-Cloud / hackingthe.cloud
  An encyclopedia for offensive and defensive security knowledge in cloud native technologies.
  ☆1,729Updated this week
• RhinoSecurityLabs / cloudgoat
  CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
  ☆2,974Updated last week
• salesforce / cloudsplaining
  Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized repo…
  ☆2,000Updated this week
• BishopFox / cloudfox
  Automating situational awareness for cloud penetration tests.
  ☆1,955Updated last month
• nccgroup / PMapper
  A tool for quickly evaluating IAM permissions in AWS.
  ☆1,433Updated 3 months ago
• aquasecurity / tfsec
  Tfsec is now part of Trivy
  ☆6,718Updated last month
• DataDog / stratus-red-team
  Granular, Actionable Adversary Emulation for the Cloud
  ☆1,829Updated last week
• duo-labs / cloudmapper
  CloudMapper helps you analyze your Amazon Web Services (AWS) environments.
  ☆6,005Updated 4 months ago
• cloud-custodian / cloud-custodian
  Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resour…
  ☆5,463Updated this week
• Checkmarx / kics
  Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastruct…
  ☆2,095Updated this week
• salesforce / policy_sentry
  IAM Least Privilege Policy Generator
  ☆2,015Updated this week
• nccgroup / Scout2
  Security auditing tool for AWS environments
  ☆1,725Updated 5 years ago
• cartography-cncf / cartography
  Cartography is a Python tool that consolidates infrastructure assets and the relationships between them in an intuitive graph view powere…
  ☆3,013Updated this week
• aquasecurity / kube-hunter
  Hunt for security weaknesses in Kubernetes clusters
  ☆4,764Updated 8 months ago
• SecurityFTW / cs-suite
  Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.
  ☆1,144Updated last year
• jonrau1 / ElectricEye
  ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring su…
  ☆960Updated this week
• sa7mon / S3Scanner
  Scan for misconfigured S3 buckets across S3-compatible APIs!
  ☆2,573Updated this week
• WithSecureLabs / awspx
  A graph-based tool for visualizing effective access and resource relationships in AWS environments.
  ☆922Updated 2 years ago
• archerysec / archerysec
  ASOC, ASPM, DevSecOps, Vulnerability Management Using ArcherySec.
  ☆2,295Updated last month
• tenable / terrascan
  Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.
  ☆4,767Updated last week
• duo-labs / cloudtracker
  CloudTracker helps you find over-privileged IAM users and roles by comparing CloudTrail logs with current IAM policies.
  ☆887Updated 2 years ago
• nccgroup / sadcloud
  A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure
  ☆658Updated last year
• DefectDojo / django-DefectDojo
  DevSecOps, ASPM, Vulnerability Management. All on one platform.
  ☆3,731Updated this week
• dagrz / aws_pwn
  A collection of AWS penetration testing junk
  ☆1,173Updated last year