POC tool to create signed AWS API GET requests to bypass Guard Duty alerting of off-instance credential use via SSRF
☆59Sep 20, 2023Updated 3 years ago
Alternatives and similar repositories for aws_url_signer
Users that are interested in aws_url_signer are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Security focused tool for dumping information from Active Directory via LDAP☆19Dec 2, 2024Updated last year
- A place to store my various pentesting related code thats too small/niche to justify its own repository, and a simple website with notes …☆40May 5, 2026Updated 6 months ago
- Unauthenticated enumeration of AWS, Azure, and GCP Principals☆294Jun 10, 2026Updated 4 months ago
- A PoC to Simulate Ransomware Attack on AWS Environment☆33Oct 14, 2024Updated 2 years ago
- ☆40Aug 2, 2024Updated 2 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- A small library to alter AWS API requests; Used for fuzzing research☆22Nov 2, 2023Updated 3 years ago
- Hide from the InstanceCredentialExfiltration GuardDuty finding by using VPC Endpoints☆123Jul 13, 2025Updated last year
- .NET port of Leron Gray's azbelt tool.☆25Sep 21, 2023Updated 3 years ago
- Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts☆62May 15, 2023Updated 3 years ago
- Jekyll Files for cloudsecwiki.com☆50Sep 16, 2021Updated 5 years ago
- Harness the security superpowers of your cloud asset inventory☆11Sep 22, 2024Updated 2 years ago
- AWS Testing and Reporting Management Tool☆20Jan 23, 2023Updated 3 years ago
- A tool for AWS incident response, that allows for enumeration, acquisition and analysis of data from AWS environments for the purpose of …☆207Aug 11, 2026Updated 2 months ago
- An Evil OIDC Server☆53Oct 19, 2022Updated 4 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A collection of documented and undocumented AWS API models☆56Nov 21, 2025Updated 11 months ago
- This GitHub Action sends a reverse shell from a runner via Azure Storage Account blobs☆39Sep 25, 2024Updated 2 years ago
- Clean accounts over permissions in GCP infra at scale☆72May 9, 2023Updated 3 years ago
- A public cloud security knowledgebase - https://www.secwiki.cloud/☆53Nov 12, 2024Updated last year
- ☆74Jun 22, 2026Updated 4 months ago
- ☆23Feb 20, 2023Updated 3 years ago
- Simple pure PowerShell POC to bypass Entra / Intune Compliance Conditional Access Policy☆170Nov 17, 2025Updated 11 months ago
- ☆193May 29, 2026Updated 5 months ago
- Swift code to run a dylib on disk☆16May 9, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- This tool implements a cloud version of the Shadow Copy attack against domain controllers running in AWS using only the EC2:CreateSnapsho…☆124Nov 2, 2019Updated 7 years ago
- Session Hijacking Visual Exploitation☆218Mar 7, 2024Updated 2 years ago
- HoneyZure is a honeypot tool specifically designed for Azure environments, fully provisioned through Terraform. It leverages a Log Analyt…☆17Jun 11, 2024Updated 2 years ago
- ☆19Jul 30, 2024Updated 2 years ago
- An implementation of infrastructure-as-code scanning using dynamic tooling.☆56Jan 18, 2022Updated 4 years ago
- ☆51Jun 13, 2024Updated 2 years ago
- Security Alert Decoration☆27Jul 28, 2026Updated 3 months ago
- Determine privileges from cloud credentials via brute-force testing.☆69Jul 25, 2026Updated 3 months ago
- A simple touchID prompt'er for use in shell scripts.☆110Jun 18, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Use TpAllocWork, TpPostWork and TpReleaseWork to execute machine code☆24Mar 13, 2023Updated 3 years ago
- Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 (IMDSv2).☆143May 1, 2025Updated last year
- ELF Beacon Object File (BOF) Template☆20Nov 18, 2024Updated last year
- CloudSplaining on AWS Managed Policies☆44Sep 8, 2025Updated last year
- DeRF (Detection Replay Framework) is an "Attacks As A Service" framework, allowing the emulation of offensive techniques and generation o…☆100Jan 12, 2024Updated 2 years ago
- SCP management tool☆133Oct 23, 2023Updated 3 years ago
- A Python script to authenticate and test access to Google Cloud Platform (GCP) resources.☆19Jan 31, 2024Updated 2 years ago