Alternatives and similar repositories for gordon:

Users that are interested in gordon are comparing it to the libraries listed below

• CloudWanderer-io / PolicyGlass
  PolicyGlass allows you to analyse one or more AWS policies' effective permissions in aggregate, by restating them in the form of PolicySh…
  ☆59Updated 3 years ago
• jdyke / gcp-iam-analyzer
  Compares and analyzes GCP IAM roles.
  ☆77Updated last month
• ovotech / cloud-key-rotator
  A Golang program to rotate AWS & GCP account keys
  ☆65Updated last month
• tenchi-security / camp
  CloudSplaining on AWS Managed Policies
  ☆41Updated this week
• gojek / CureIAM
  Clean accounts over permissions in GCP infra at scale
  ☆71Updated last year
• allisonis / gcp-iam-sentinel-examples
  ☆28Updated 4 years ago
• dowjones / reapsaw
  Reapsaw is a continuous security devsecops tool, which helps in enabling security into CI/CD Pipeline. It supports coverage for multiple …
  ☆41Updated 4 years ago
• somethingnew2-0 / SimpleCSPM
  GCP CSPM using Google Sheets
  ☆35Updated 2 weeks ago
• ncc-erik-steringer / Aerides
  An implementation of infrastructure-as-code scanning using dynamic tooling.
  ☆56Updated 3 years ago
• salesforce / metabadger
  Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 (IMDSv2).
  ☆143Updated last year
• disruptops / IncidentResponseGenerator
  Updated incident response generator for training classes
  ☆44Updated 3 years ago
• jchrisfarris / detect-credential-compromise
  Cloudformation Template and Lambda to detect if Instance Profile credentials are being used outside your AWS Account.
  ☆29Updated 5 years ago
• antitree / cmd_and_kubectl_demos
  ☆27Updated 5 months ago
• claudijd / rotten_apple
  A tool for testing continuous integration (CI) or continuous delivery (CD) system security
  ☆23Updated 11 years ago
• lirlia / prel
  prel(iminary) is an application that temporarily assigns Google Cloud IAM Roles and includes an approval process.
  ☆39Updated this week
• praetorian-inc / snowcat
  a tool to audit the istio service mesh
  ☆173Updated 3 years ago
• mauilion / blackhat-2019
  ☆49Updated 4 years ago
• darkarnium / perimeterator
  'Continuous' AWS perimeter monitoring: Periodically scan internet facing AWS resources to detect misconfigured services.
  ☆64Updated 5 years ago
• disruptops / assess_network
  Assess certain AWS network configurations
  ☆12Updated 6 years ago
• DataDog / workload-security-evaluator
  Tooling to simulate runtime attacks and test default runtime detections from Datadog Cloud Security Management.
  ☆30Updated 6 months ago
• kmcquade / OWASP-YouTube-2021
  Deliberately vulnerable AWS resources for security assessment demos
  ☆31Updated 2 years ago
• Rezonate-io / github-oidc-checker
  Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts
  ☆61Updated last year
• nccgroup / s3_objects_check
  Whitebox evaluation of effective S3 object permissions, to identify publicly accessible files.
  ☆76Updated 3 years ago
• alexivkin / kubepwn
  Kubernetes Pwnage for all
  ☆57Updated 4 years ago
• lightspin-tech / red-shadow
  Lightspin AWS IAM Vulnerability Scanner
  ☆96Updated 4 years ago
• technologik / terraform_attack_automation
  Automation associated with our talk: Attacking and Defending Infrastructure with Terraform
  ☆16Updated 2 years ago
• mllamazares / STRIDE-vs-ASVS
  🖇️ STRIDE vs. ASVS equivalence table
  ☆76Updated 7 months ago
• Frichetten / aws_stealth_perm_enum
  Research on the enumeration of IAM permissions without logging to CloudTrail
  ☆61Updated 3 years ago
• appsecco / owasp-threat-dragon-gitlab
  OWASP Threat Dragon with Gitlab Integration
  ☆25Updated 7 years ago
• Netflix-Skunkworks / cloudtrail-anomaly
  ☆83Updated 5 years ago