Alternatives and similar repositories for terraform_attack_automation

Users that are interested in terraform_attack_automation are comparing it to the libraries listed below

• jdyke / gcp-iam-analyzer
  Compares and analyzes GCP IAM roles.
  ☆77Updated 6 months ago
• somethingnew2-0 / SimpleCSPM
  GCP CSPM using Google Sheets
  ☆37Updated 6 months ago
• zenzora / awesome-gcpsec
  ☆14Updated 3 years ago
• mllamazares / STRIDE-vs-ASVS
  🖇️ STRIDE vs. ASVS equivalence table
  ☆77Updated last year
• Rezonate-io / github-oidc-checker
  Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts
  ☆61Updated 2 years ago
• disruptops / IncidentResponseGenerator
  Updated incident response generator for training classes
  ☆44Updated 4 years ago
• offensive-terraform / offensive-terraform.github.io
  Offensive Terraform Website
  ☆45Updated 5 years ago
• salesforce / metabadger
  Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 (IMDSv2).
  ☆143Updated 5 months ago
• Netflix-Skunkworks / cloudtrail-anomaly
  ☆83Updated 5 years ago
• nccgroup / ConMachi
  Container Blackbox Security Auditing Tool: enumerates security configuration from within the target container
  ☆105Updated 6 years ago
• prisma-cloud / IAMFinder
  IAMFinder enumerates and finds users and IAM roles in a target AWS account.
  ☆111Updated 4 years ago
• righteousgambit / quiet-riot
  Unauthenticated enumeration of AWS, Azure, and GCP Principals
  ☆244Updated 10 months ago
• PaloAltoNetworks / github-oidc-utils
  ☆36Updated 5 months ago
• domain-protect / domain-protect-gcp
  Protect against subdomain takeover
  ☆94Updated 2 months ago
• secmerc / materialize-threats
  ☆67Updated 2 months ago
• Frichetten / aws_stealth_perm_enum
  Research on the enumeration of IAM permissions without logging to CloudTrail
  ☆61Updated 4 years ago
• KatTraxler / gcpdocs
  Repository to archive GCP Documentation for local use
  ☆16Updated 7 months ago
• caizencloud / caizen
  Harness the security superpowers of your cloud asset inventory
  ☆11Updated last year
• RhinoSecurityLabs / dsnap
  Utility for downloading and mounting EBS snapshots using the EBS Direct API's
  ☆86Updated 6 months ago
• tenable / KaiMonkey
  KaiMonkey provides vulnerable infrastructure as code (IaC) to help explore and understand common cloud security threats exposed via IaC.
  ☆106Updated last year
• matthewdfuller / aws-guides
  AWS docs, guides, and other tools
  ☆75Updated 2 years ago
• allisonis / gcp-iam-sentinel-examples
  ☆28Updated 5 years ago
• darkarnium / perimeterator
  'Continuous' AWS perimeter monitoring: Periodically scan internet facing AWS resources to detect misconfigured services.
  ☆64Updated 6 years ago
• zmallen / cloudtrail2sightings
  Convert cloudtrail data to MITRE ATT&CK Sightings
  ☆80Updated 3 years ago
• antitree / cmd_and_kubectl_demos
  ☆27Updated last week
• gojek / CureIAM
  Clean accounts over permissions in GCP infra at scale
  ☆71Updated 2 years ago
• kbroughton / azure_cis_scanner
  Security Scanner based on CIS benchmark 1.1 inspired by Scout2
  ☆53Updated 2 years ago
• Aqua-Nautilus / TrailShark
  ☆50Updated 11 months ago
• aquia-inc / aws-guardduty-runbook-generator
  Generates runbooks for GuardDuty findings
  ☆38Updated last year
• naman16 / AWS-Security-Guardrails-TF
  ☆31Updated 11 months ago