#1Tools for auditing configurations, permissions, and services in cloud platforms (IaaS, PaaS).
Kitploit recommended
salesforce/policy_sentryGenerates least-privilege AWS IAM policies based on resource ARNs and access levels, automating secure policy creation for cloud infrastructure.
automatedlab/automatedlabPowerShell-based provisioning framework for deploying complex lab environments on Hyper-V and Azure. Supports Windows, Linux, and products like AD,…
stackrox/stackroxThe StackRox Kubernetes Security Platform performs a risk analysis of the container environment, delivers visibility and runtime alerts, and provides…
t0pcyber/hawkPowershell Based tool for gathering information related to O365 intrusions and potential Breaches
tmobile/pacbotPacBot (Policy as Code Bot)
skydive-project/skydiveAn open source real-time network topology and protocols analyzer
tellerops/tellerCloud native secrets management for developers - never leave your command line for secrets.
nozaq/terraform-aws-secure-baselineTerraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational…
securityftw/cs-suiteCloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.
hacktricks-wiki/hacktricks-cloudCommunity-driven knowledge base for pentesting cloud environments and CI/CD pipelines: attack techniques, enumeration, privilege escalation, and…
lxc/incus-osImmutable Linux OS image optimized for running Incus containers and virtual machines, with UEFI Secure Boot, TPM 2.0 disk encryption, and automated…
dagrz/aws_pwnA collection of AWS penetration testing junk
zeus-labs/zeuscloudOpen-source cloud security platform that discovers attack paths, identifies misconfigurations, visualizes IAM access, and provides step-by-step…
silverhack/monkey365PowerShell-based security assessment framework for Microsoft 365, Azure, and Entra ID. Scans for misconfigurations, CIS benchmark compliance, and…
p0ssuidao/terraguard🛡️ 🔒 This project's goal is to be simple to create and destroy your own VPN service using WireGuard.
reverseclabs/awspxA graph-based tool for visualizing effective access and resource relationships in AWS environments.
corneliusweig/rakkessReview Access - kubectl plugin to show an access matrix for k8s server resources
ine-labs/azuregoatAzureGoat : A Damn Vulnerable Azure Infrastructure
