This is an offensive guide to securing AWS infrastructures. The hope is that by knowing how to take advantage of various types of AWS weaknesses you will be verse enough to provide the correct countermeasures.
☆172Mar 1, 2019Updated 7 years ago
Alternatives and similar repositories for guide-aws-hacking
Users that are interested in guide-aws-hacking are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Course designed to to provide participants with the essential skills in the field of DevSecOps.☆14Jan 21, 2019Updated 7 years ago
- Some python scripts I wrote that help with various specialized AWS security things☆10Jan 15, 2020Updated 6 years ago
- Deliberately vulnerable AWS resources for security assessment demos☆33Aug 20, 2022Updated 4 years ago
- A collection of AWS penetration testing junk☆1,225Aug 30, 2023Updated 3 years ago
- Burp extension to generate multi-step CSRF POC.☆31Sep 23, 2019Updated 7 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Convert cloudtrail data to MITRE ATT&CK Sightings☆84Jul 25, 2022Updated 4 years ago
- ☆18Sep 22, 2018Updated 8 years ago
- Cloudformation Template and Lambda to detect if Instance Profile credentials are being used outside your AWS Account.☆29Aug 18, 2019Updated 7 years ago
- ☆263Jun 28, 2024Updated 2 years ago
- An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share th…☆14Feb 16, 2021Updated 5 years ago
- A BurpSuite extension for beautifying .NET message parameters and hiding some of the extra clutter that comes with .NET web apps (i.e. __…☆12Jun 29, 2015Updated 11 years ago
- A very vulnerable serverless application in AWS Lambda☆98Oct 7, 2019Updated 7 years ago
- The Open-Source AWS Cyber Range☆497Aug 16, 2020Updated 6 years ago
- Repository for all the workshop content delivered at nullcon X on 1st of March 2019☆79Apr 4, 2019Updated 7 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A powerful target reconnaissance framework powered by graph theory.☆421Oct 21, 2022Updated 4 years ago
- Resource types that can be publicly exposed on AWS☆336Feb 23, 2022Updated 4 years ago
- An AWS Lambda vulnerable application written in flask.☆50Oct 9, 2017Updated 9 years ago
- Burp Extension for AWS Signing☆92Jan 10, 2025Updated last year
- The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.☆5,379May 19, 2026Updated 5 months ago
- A list of questions that can be asked during an interview for a cloud architect position.☆11Nov 27, 2021Updated 4 years ago
- Pown.js is a security testing an exploitation toolkit built on top of Node.js and NPM.☆260Apr 7, 2023Updated 3 years ago
- Configure AWS accounts for CloudTrail, Root Account Usage Monitor.☆13Aug 24, 2015Updated 11 years ago
- CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool☆3,768Oct 14, 2026Updated 2 weeks ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A centralized source of all AWS IAM privilege escalation methods released by Rhino Security Labs.☆936Jul 25, 2019Updated 7 years ago
- Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.☆654Nov 21, 2019Updated 6 years ago
- Electron based screenshot scanner☆68Feb 4, 2023Updated 3 years ago
- Tools to automate AWS Cloud security assessments☆24Mar 26, 2020Updated 6 years ago
- ☆20Jan 12, 2022Updated 4 years ago
- Cloud-related research releases from the Rhino Security Labs team.☆393Apr 23, 2020Updated 6 years ago
- Opsec considerations for each AWS GuardDuty finding type.☆24Oct 29, 2020Updated 6 years ago
- Watch CloudTrail and send notifications of every action to an slack channel.☆13Jun 15, 2018Updated 8 years ago
- Welcome to OpenDevSecOps! Our mission is to deliver highly-resilient, readily-available and free defensive and offensive devops security …☆21Jan 29, 2019Updated 7 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- AWS CloudTrail CloudFormation template which creates KMS encryption keys, an encrypted S3 bucket, and enables CloudTrail☆14May 26, 2024Updated 2 years ago
- Intentionally Vulnerable Serverless Functions to understand the specifics of Serverless Security Vulnerabilities☆139Dec 8, 2022Updated 3 years ago
- barq: The AWS Cloud Post Exploitation framework!☆387Nov 19, 2022Updated 3 years ago
- A utility to convert your AWS CLI credentials into AWS console access.☆263May 7, 2020Updated 6 years ago
- ☆12Feb 21, 2019Updated 7 years ago
- Broken Link Hijacking Burp Extension☆59Sep 13, 2019Updated 7 years ago
- Automated blind-xss search for Burp Suite☆23Mar 28, 2022Updated 4 years ago