opendevsecops / guide-aws-hackingLinks
This is an offensive guide to securing AWS infrastructures. The hope is that by knowing how to take advantage of various types of AWS weaknesses you will be verse enough to provide the correct countermeasures.
☆172Updated 6 years ago
Alternatives and similar repositories for guide-aws-hacking
Users that are interested in guide-aws-hacking are comparing it to the libraries listed below
Sorting:
- A step-by-step walkthrough of CloudGoat 2.0 scenarios.☆134Updated 5 years ago
- Hands-On AWS Penetration Testing with Kali Linux published by Packt☆134Updated 2 years ago
- Damn Vulnerable Cloud Application☆195Updated 6 years ago
- Search exposed EBS volumes for secrets☆297Updated 2 years ago
- Cloud-related research releases from the Rhino Security Labs team.☆388Updated 5 years ago
- ☆251Updated last year
- A tool geared towards pentesting APIs using OpenAPI definitions.☆177Updated 2 years ago
- Fast and stealthy Amazon S3 bucket enumeration tool for pentesters.☆251Updated 2 months ago
- Pentesting/Bugbounty Dockerfiles.☆177Updated 4 years ago
- Route53/CloudFront Vulnerability Assessment Utility☆86Updated last year
- Find cloud assets that no one wants exposed 🔎 ☁️☆347Updated 4 years ago
- AWS S3 Bucket/Object Finder☆120Updated 3 years ago
- Intentionally Vulnerable Serverless Functions to understand the specifics of Serverless Security Vulnerabilities☆136Updated 2 years ago
- Methodology for high-quality web application security testing - https://github.com/tprynn/web-methodology/wiki☆209Updated 8 months ago
- The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters☆103Updated last year
- A simple file-based scanner to look for potential AWS access and secret keys in files☆93Updated last year
- Amazon bucket brute force tool☆102Updated 12 years ago
- 🏰 A Python script for AWS S3 bucket enumeration.☆144Updated 2 years ago
- A tool for identifying misconfigured CloudFront domains☆360Updated 5 years ago
- A tool to enumerate S3 buckets manually or via certstream☆82Updated 2 years ago
- ☆81Updated 3 years ago
- Monitor the internet attack surface of various public cloud environments. Currently supports AWS, GCP, Azure, DigitalOcean and Oracle Clo…☆126Updated last year
- These are the regexes that power truffleHog☆218Updated 2 years ago
- A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.☆526Updated 2 years ago
- Corsair_scan is a security tool to test Cross-Origin Resource Sharing (CORS).☆122Updated 2 years ago
- ☆276Updated 3 years ago
- Fetch the details of assets hosted on AWS.☆89Updated last year
- vulnerable single sign on☆148Updated 11 months ago
- Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"☆353Updated 4 years ago
- A collection of awesome AWS S3 tools that collects and enumerates exposed S3 buckets☆374Updated last year