A simple tool to audit your AWS/GCP infrastructure for misconfiguration or potential security issues with plugins integration
☆343Sep 3, 2026Updated this week
Alternatives and similar repositories for yatas
Users that are interested in yatas are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation☆113Feb 16, 2024Updated 2 years ago
- Plugin for YATAS that audits AWS accounts for misconfiguration and security issues☆15Updated this week
- Automating situational awareness for cloud penetration tests.☆2,573Aug 20, 2026Updated 2 weeks ago
- Cloud Exploit Framework☆112May 11, 2022Updated 4 years ago
- cloudgrep is grep for cloud storage☆333Mar 14, 2026Updated 5 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- The state of my kubernetes cluster☆10Updated this week
- A tool for AWS incident response, that allows for enumeration, acquisition and analysis of data from AWS environments for the purpose of …☆205Aug 11, 2026Updated 3 weeks ago
- Guidelines to work with Terraform☆34Aug 21, 2026Updated 2 weeks ago
- Cloudlist is a tool for listing Assets from multiple Cloud Providers.☆1,051Updated this week
- A simple tool that helps to find assets/domains based on the Google Analytics ID.☆180Jan 12, 2026Updated 7 months ago
- User enumeration and password spraying tool for testing Azure AD☆71Mar 3, 2022Updated 4 years ago
- A tool for scanning public or private AMIs for sensitive files and secrets. The tool follows the research made on AWS CloudQuarry where w…☆115Nov 13, 2024Updated last year
- A PoC to Simulate Ransomware Attack on AWS Environment☆33Oct 14, 2024Updated last year
- Generates runbooks for GuardDuty findings☆38Jun 24, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Credax - Fuzzing Tool with Slack Notifications. Also removes false positive responses.☆10Oct 14, 2021Updated 4 years ago
- Unauthenticated enumeration of AWS, Azure, and GCP Principals☆293Jun 10, 2026Updated 2 months ago
- GATOR - GCP Attack Toolkit for Offensive Research, a tool designed to aid in research and exploiting Google Cloud Environments☆90Jun 22, 2024Updated 2 years ago
- RedCloudOS is a Cloud Adversary Simulation Operating System for Red Teams to assess the Cloud Security of Leading Cloud Service Providers…☆676Feb 17, 2026Updated 6 months ago
- A tool for quickly evaluating IAM permissions in AWS.☆1,576Aug 2, 2024Updated 2 years ago
- List of known AWS accounts☆265Jun 26, 2026Updated 2 months ago
- ☆116Feb 11, 2026Updated 6 months ago
- Proof of concept code for Datadog Security Labs referenced exploits.☆449Aug 25, 2026Updated last week
- Granular, Actionable Adversary Emulation for the Cloud☆2,385Updated this week
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- DeRF (Detection Replay Framework) is an "Attacks As A Service" framework, allowing the emulation of offensive techniques and generation o…☆100Jan 12, 2024Updated 2 years ago
- Deploy a SOCKS5 proxy in DigitalOcean and autoconfigure the Burp proxy settings to route all traffic through the droplet☆57Oct 23, 2024Updated last year
- Create your own vulnerable by design AWS penetration testing playground☆472May 1, 2026Updated 4 months ago
- EC2StepShell is an AWS post-exploitation tool for getting high privileges reverse shells in public or private EC2 instances.☆71Sep 20, 2024Updated last year
- Zed Attack Proxy Scripts for finding CVEs and Secrets.☆125Jun 2, 2022Updated 4 years ago
- Collection of offensive tools targeting Microsoft Azure☆227Apr 1, 2026Updated 5 months ago
- Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently …☆374Jul 10, 2026Updated last month
- A Azure Exploitation Toolkit for Red Team & Pentesters☆168May 6, 2023Updated 3 years ago
- https://breaches.cloud☆42Jun 14, 2026Updated 2 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Enumerate AWS cloud resources based on provided credential☆52May 11, 2022Updated 4 years ago
- Pass secrets as environment variables to a process☆128Updated this week
- ☆51Jun 13, 2024Updated 2 years ago
- This repository provides sample templates for security playbooks against various scenarios when using Amazon Web Services.☆670Updated this week
- Monkey365 is an open-source security assessment tool for Microsoft 365, Azure, and Microsoft Entra ID. It helps security professionals id…☆1,335Aug 7, 2026Updated 3 weeks ago
- ☆168Jan 7, 2022Updated 4 years ago
- Determine privileges from cloud credentials via brute-force testing.☆69Jul 25, 2026Updated last month