#1Tools for auditing configurations, permissions, and services in cloud platforms (IaaS, PaaS).
Kitploit recommended
alegrey91/vex8sSuppress vulnerabilities applying Kubernetes context to scans
radkawar/aws-firmware-dumpAcquires the EBS disks of an AWS AMI you can launch, streaming snapshots via EBS direct APIs to a private S3 bucket with sha256 manifests and…
qmadev/tf-mythic-azureAutomatically deploying Mythic C2 in Azure using Terraform
xlab-si/iac-scan-runnerService that scans your Infrastructure as Code for common vulnerabilities
nccgroup/cowcloudServerless AWS solution for distributing recon and vulnerability scanning workloads. Submit tasks via web UI; EC2 workers execute custom Python…
wearecloudar/s3-account-searchS3 Account Search
rootsecdev/secretsstalkerRead-only Entra ID app-credential assessment: enumerates Graph permissions, Azure RBAC, and reachable cloud data, then maps findings to…
aquasecurity/trivy-plugin-aquaPlugin for integrating Trivy with Aqua Security platform to scan IaC, pipelines, and dependencies for vulnerabilities and misconfigurations.
capture0x/aws-pentestAutomated AWS security assessment CLI with 30 modules covering IAM privilege escalation, S3 exposure, compute, network, logging and misconfiguration…
ayushpriya10/imdshiftAutomates migration of AWS workloads from IMDSv1 to IMDSv2 to mitigate SSRF attacks. Detects IMDSv1 usage across EC2, ECS, EKS, Lightsail, and more,…
andresriancho/nimbostratus-targetThis repository holds a target infrastructure you can use for running the nimbostratus tools.
lnfernux/log-horizonMicrosoft Sentinel SIEM Log Source Analyzer
pyperanger/dockerevilWorldFirst (Public) Docker API Exploit - My security researches involving Docker and Openshift
tevora-threat/rt_redirectorsAnsible role to configure redirectors for red team C2
qarait/ephemeraZero-Trust SSH CA
liamromanis101/cve-2026-31431-copy-fail---vulnerability-detection-scriptDetection script for CVE-2026-31431 (Copy Fail) that checks kernel version, patch presence, kernel configs, AF_ALG socket availability, setuid…
ustayready/outpostAWS Testing and Reporting Management Tool
nccgroup/sfpoldevchkSalesforce Policy Deviation Checker
