Alternatives and similar repositories for serverless-prey:

Users that are interested in serverless-prey are comparing it to the libraries listed below

• righteousgambit / quiet-riot
  Unauthenticated enumeration of AWS, Azure, and GCP Principals
  ☆210Updated 2 months ago
• WithSecureLabs / leonidas
  Automated Attack Simulation in the Cloud, complete with detection use cases.
  ☆550Updated last month
• SummitRoute / aws_exposable_resources
  Resource types that can be publicly exposed on AWS
  ☆320Updated 2 years ago
• ihamburglar / Redboto
  Red Team Scripts for AWS.
  ☆166Updated 4 years ago
• BishopFox / iam-vulnerable
  Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.
  ☆487Updated 11 months ago
• amrandazz / attack-guardduty-navigator
  A MITRE ATT&CK Navigator export for AWS GuardDuty Findings
  ☆137Updated 3 years ago
• prisma-cloud / IAMFinder
  IAMFinder enumerates and finds users and IAM roles in a target AWS account.
  ☆109Updated 4 years ago
• PaloAltoNetworks / IAM-Deescalate
  IAM-Deescalate helps mitigate privilege escalation risk in AWS identity and access management (IAM)
  ☆96Updated 2 years ago
• RhinoSecurityLabs / Cloud-Security-Research
  Cloud-related research releases from the Rhino Security Labs team.
  ☆375Updated 4 years ago
• OWASP / Serverless-Goat
  OWASP ServerlessGoat: a serverless application demonstrating common serverless security flaws
  ☆323Updated 5 months ago
• appsecco / attacking-cloudgoat2
  A step-by-step walkthrough of CloudGoat 2.0 scenarios.
  ☆134Updated 4 years ago
• lightspin-tech / red-shadow
  Lightspin AWS IAM Vulnerability Scanner
  ☆96Updated 3 years ago
• salesforce / metabadger
  Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 (IMDSv2).
  ☆141Updated 9 months ago
• trustoncloud / threatmodel-for-aws-s3
  ThreatModel for Amazon S3 - Library of all the attack scenarios on Amazon S3, and how to mitigate them following a risk-based approach
  ☆151Updated last year
• tenable / KaiMonkey
  KaiMonkey provides vulnerable infrastructure as code (IaC) to help explore and understand common cloud security threats exposed via IaC.
  ☆97Updated last year
• sbasu7241 / AWS-Threat-Simulation-and-Detection
  Playing around with Stratus Red Team (Cloud Attack simulation tool) and SumoLogic
  ☆284Updated 2 years ago
• RhinoSecurityLabs / IAMActionHunter
  An AWS IAM policy statement parser and query tool.
  ☆166Updated 11 months ago
• brianlam38 / AWS-Certified-Security-Specialty
  AWS Certified Security Specialty (2020) course notes
  ☆115Updated 4 years ago
• orcasecurity / orca-toolbox
  ☆111Updated this week
• darkarnium / perimeterator
  'Continuous' AWS perimeter monitoring: Periodically scan internet facing AWS resources to detect misconfigured services.
  ☆63Updated 5 years ago
• easttimor / aws-incident-response
  ☆368Updated 10 months ago
• OpenCSPM / opencspm
  Open Cloud Security Posture Management Engine
  ☆336Updated 2 years ago
• OWASP / DVSA
  a Damn Vulnerable Serverless Application
  ☆536Updated last year
• openraven / magpie
  A Cloud Security Posture Manager or CSPM with a focus on security analysis for the modern cloud stack and a focus on the emerging threat …
  ☆178Updated 4 months ago
• prevade / cloudjack
  Route53/CloudFront Vulnerability Assessment Utility
  ☆84Updated last year
• Frichetten / SneakyEndpoints
  Hide from the InstanceCredentialExfiltration GuardDuty finding by using VPC Endpoints
  ☆113Updated last year
• mykter / aws-security-cert-service-notes
  Security aspects of AWS products for the Security Specialist certification
  ☆208Updated 2 years ago
• awslabs / aws-automated-incident-response-and-forensics
  ☆378Updated last year
• stuhirst / awssecurity
  for AWS Security material
  ☆246Updated 2 years ago
• nccgroup / sadcloud
  A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure
  ☆676Updated last year