#1Tools for assessing, testing, and securing cloud environments (AWS, Azure, GCP) and their services.
Kitploit recommended
jordanpotti/awsbucketdumpSecurity Tool to Look For Interesting Files in S3 Buckets
mongodb/kingfisherDetect secrets + live validation. Map blast radius. Revoke fast. Use the CLI or embed in Rust and Python.
resiprocate/resiprocateC++ implementation of SIP, ICE, TURN and related protocols.
cisco-ai-defense/defenseclawSecurity Governance for Agentic AI
specterops/azurehoundCollects Azure tenant data (users, groups, roles, resources) and exports it for BloodHound attack path analysis in cloud penetration testing and red…
sushegaad/claude-skills-governance-risk-and-complianceInstallable Claude Skills providing expert-level compliance guidance for 30+ frameworks including ISO 27001, SOC 2, FedRAMP, GDPR, HIPAA, NIST CSF,…
zakirkun/guardian-cliGuardian is a production-ready AI-powered penetration testing automation CLI tool that leverages Google Gemini and LangChain to orchestrate…
nozaq/terraform-aws-secure-baselineTerraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational…
openidentityplatform/openamOpen-source access management platform offering single sign-on, adaptive authentication, authorization, and federation for secure access to web,…
google/turbiniaAutomation and Scaling of Digital Forensics Tools
ossf/allstarGitHub App to set and enforce security policies
securityftw/cs-suiteCloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.
lxc/incus-osImmutable Linux OS image optimized for running Incus containers and virtual machines, with UEFI Secure Boot, TPM 2.0 disk encryption, and automated…
mdsecactivebreach/o365-attack-toolkitA toolkit to attack Office365
stealthcopter/deepceDocker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)
mozillazg/ptcpdumpeBPF-based packet analyzer that captures network traffic with automatic process, container, and Kubernetes pod metadata annotation, supporting…
kubeshop/botkubeAn app that helps you monitor your Kubernetes cluster, debug critical deployments & gives recommendations for standard practices
knavesec/credmasterRefactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling
