toniblyx / my-arsenal-of-aws-security-tools

Related projects ⓘ

Alternatives and complementary repositories for my-arsenal-of-aws-security-tools

• RhinoSecurityLabs / pacu
  The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
  ☆4,399Updated this week
• nccgroup / ScoutSuite
  Multi-Cloud Security Auditing Tool
  ☆6,740Updated last month
• aquasecurity / cloudsploit
  Cloud Security Posture Management (CSPM)
  ☆3,358Updated this week
• prowler-cloud / prowler
  Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, complia…
  ☆10,856Updated this week
• duo-labs / cloudmapper
  CloudMapper helps you analyze your Amazon Web Services (AWS) environments.
  ☆6,005Updated 4 months ago
• RhinoSecurityLabs / cloudgoat
  CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
  ☆2,974Updated last week
• nccgroup / PMapper
  A tool for quickly evaluating IAM permissions in AWS.
  ☆1,433Updated 3 months ago
• salesforce / cloudsplaining
  Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized repo…
  ☆2,000Updated this week
• salesforce / policy_sentry
  IAM Least Privilege Policy Generator
  ☆2,015Updated this week
• aquasecurity / tfsec
  Tfsec is now part of Trivy
  ☆6,718Updated last month
• cartography-cncf / cartography
  Cartography is a Python tool that consolidates infrastructure assets and the relationships between them in an intuitive graph view powere…
  ☆3,013Updated this week
• cloud-custodian / cloud-custodian
  Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resour…
  ☆5,463Updated this week
• Hacking-the-Cloud / hackingthe.cloud
  An encyclopedia for offensive and defensive security knowledge in cloud native technologies.
  ☆1,729Updated this week
• SecurityFTW / cs-suite
  Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.
  ☆1,144Updated last year
• BishopFox / cloudfox
  Automating situational awareness for cloud penetration tests.
  ☆1,955Updated last month
• aquasecurity / kube-hunter
  Hunt for security weaknesses in Kubernetes clusters
  ☆4,764Updated 8 months ago
• DataDog / stratus-red-team
  Granular, Actionable Adversary Emulation for the Cloud
  ☆1,829Updated last week
• nccgroup / Scout2
  Security auditing tool for AWS environments
  ☆1,725Updated 5 years ago
• RhinoSecurityLabs / AWS-IAM-Privilege-Escalation
  A centralized source of all AWS IAM privilege escalation methods released by Rhino Security Labs.
  ☆897Updated 5 years ago
• Netflix / security_monkey
  Security Monkey monitors AWS, GCP, OpenStack, and GitHub orgs for assets and their changes over time.
  ☆4,357Updated 3 years ago
• WithSecureLabs / awspx
  A graph-based tool for visualizing effective access and resource relationships in AWS environments.
  ☆922Updated 2 years ago
• Netflix / repokid
  AWS Least Privilege for Distributed, High-Velocity Deployment
  ☆1,120Updated last year
• devsecops / awesome-devsecops
  An authoritative list of awesome devsecops tools with the help from community experiments and contributions.
  ☆4,642Updated 6 months ago
• jonrau1 / ElectricEye
  ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring su…
  ☆960Updated this week
• dagrz / aws_pwn
  A collection of AWS penetration testing junk
  ☆1,173Updated last year
• sa7mon / S3Scanner
  Scan for misconfigured S3 buckets across S3-compatible APIs!
  ☆2,573Updated this week
• duo-labs / cloudtracker
  CloudTracker helps you find over-privileged IAM users and roles by comparing CloudTrail logs with current IAM policies.
  ☆887Updated 2 years ago
• 4ndersonLin / awesome-cloud-security
  🛡️ Awesome Cloud Security Resources ⚔️
  ☆2,087Updated last week