Cloud Infrastructure Security

blacksky-algorithms/atproto

Fork of the AT Protocol reference implementation with performance-optimized AppView, Rust-based firehose indexer, Redis caching, and community…

ustayready/thunderstorm

A collector and derivation engine. It maps your environment, evaluates effective permissions and trust, and writes a complete attack graph as a…

lightspin-tech/red-shadow

Scans AWS IAM configurations for shadow admins by detecting misconfigured deny policies that fail to restrict user actions on groups, enabling…

nccgroup/conmachi

Container Blackbox Security Auditing Tool: enumerates security configuration from within the target container

c0axx/canaryhunter

Canary Hunter aims to be a quick PowerShell script to check for Common Canaries in various formats generated for free on canarytokens.org

synacktiv/shh

Systemd Hardening Helper - Mirror of https://github.com/desbma/shh

0xbharath/slurp-old

A tool to enumerate S3 buckets manually or via certstream

aaaguirrep/offensive-docker-vps

Create a VPS on Google Cloud Platform or Digital Ocean easily with Offensive Docker included to launch assessment to the targets.

nccgroup/s3_objects_check

Whitebox evaluation of effective S3 object permissions, to identify publicly accessible files.

karimhabush/cis-vsphere

A tool to assess the compliance of a VMware vSphere environment against the CIS Benchmark.

stillbigjosh/adaptix-serverless-c2

Serverless C2 transport plugin for AdaptixC2 v1.2 using AWS Lambda + DynamoDB as the relay infrastructure.

denizparlak/hayat

Hayat is a script for report and analyze Google Cloud Platform resources.

armourbird/csf

ArmourBird CSF - Container Security Framework

kalilinux/build-scripts/kali-cloud

Scripts to build Kali cloud images (fork of https://salsa.debian.org/cloud-team/debian-cloud-images)

dev-sec/puppet-ssh-hardening

This puppet module provides secure ssh-client and ssh-server configurations.

gojek/cureiam

Clean accounts over permissions in GCP infra at scale

tinfoilsh/cvmimage

Builds a hermetic, reproducible confidential VM image for secure inference and custom compute on AMD SEV-SNP and Intel TDX, with auditable…

nccgroup/raccoon

Salesforce object access auditor