A simple tool to audit your AWS/GCP infrastructure for misconfiguration or potential security issues with plugins integration
☆343Oct 16, 2026Updated 3 weeks ago
Alternatives and similar repositories for yatas
Users that are interested in yatas are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Plugin for YATAS that audits AWS accounts for misconfiguration and security issues☆15Updated this week
- A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation☆113Feb 16, 2024Updated 2 years ago
- Guidelines to work with Terraform☆36Oct 20, 2026Updated 2 weeks ago
- Automating situational awareness for cloud penetration tests.☆2,618Updated this week
- cloudgrep is grep for cloud storage☆335Mar 14, 2026Updated 7 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A tool for AWS incident response, that allows for enumeration, acquisition and analysis of data from AWS environments for the purpose of …☆207Aug 11, 2026Updated 2 months ago
- Cloud Exploit Framework☆113May 11, 2022Updated 4 years ago
- The state of my kubernetes cluster☆10Updated this week
- Cloudlist is a tool for listing Assets from multiple Cloud Providers.☆1,059Updated this week
- A PoC to Simulate Ransomware Attack on AWS Environment☆33Oct 14, 2024Updated 2 years ago
- Enumerate AWS cloud resources based on provided credential☆52May 11, 2022Updated 4 years ago
- A tool for scanning public or private AMIs for sensitive files and secrets. The tool follows the research made on AWS CloudQuarry where w…☆117Nov 13, 2024Updated last year
- An AWS IAM policy statement parser and query tool.☆202Feb 10, 2026Updated 8 months ago
- Unauthenticated enumeration of AWS, Azure, and GCP Principals☆294Jun 10, 2026Updated 4 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Pass secrets as environment variables to a process☆128Updated this week
- Deploy a SOCKS5 proxy in DigitalOcean and autoconfigure the Burp proxy settings to route all traffic through the droplet☆57Oct 23, 2024Updated 2 years ago
- A simple tool that helps to find assets/domains based on the Google Analytics ID.☆179Jan 12, 2026Updated 9 months ago
- ☆13Sep 28, 2023Updated 3 years ago
- Evaluate your IaC quality☆16Updated this week
- This repository provides sample templates for security playbooks against various scenarios when using Amazon Web Services.☆679Updated this week
- EC2StepShell is an AWS post-exploitation tool for getting high privileges reverse shells in public or private EC2 instances.☆71Sep 20, 2024Updated 2 years ago
- GATOR - GCP Attack Toolkit for Offensive Research, a tool designed to aid in research and exploiting Google Cloud Environments☆90Jun 22, 2024Updated 2 years ago
- A tool for quickly evaluating IAM permissions in AWS.☆1,590Aug 2, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 🌯 Burrito is a TACoS Kubernetes Operator - "Argo CD for Terraform"☆765Updated this week
- Generates runbooks for GuardDuty findings☆38Jun 24, 2024Updated 2 years ago
- Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently …☆378Oct 20, 2026Updated 2 weeks ago
- AWS SSO serverless phishing API.☆32Jun 30, 2021Updated 5 years ago
- Cloud agnostic IAM permissions enumerator☆166Apr 10, 2025Updated last year
- A Azure Exploitation Toolkit for Red Team & Pentesters☆168May 6, 2023Updated 3 years ago
- RedCloudOS is a Cloud Adversary Simulation Operating System for Red Teams to assess the Cloud Security of Leading Cloud Service Providers…☆674Feb 17, 2026Updated 8 months ago
- ☆193May 29, 2026Updated 5 months ago
- GitHub Actions Pipeline Enumeration and Attack Tool☆10Apr 24, 2026Updated 6 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Zed Attack Proxy Scripts for finding CVEs and Secrets.☆127Jun 2, 2022Updated 4 years ago
- BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for c…☆444Dec 30, 2025Updated 10 months ago
- ☆117Oct 8, 2026Updated 3 weeks ago
- Analyzes CloudTrail data of a given AWS account and generates a summary of recently active IAM principals, API calls they made, as well a…☆167Aug 6, 2026Updated 3 months ago
- Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized repo…☆2,258Updated this week
- Proof of concept code for Datadog Security Labs referenced exploits.☆451Sep 14, 2026Updated last month
- Pull secrets from an AWS environment☆65Feb 2, 2020Updated 6 years ago