Cloud Security

bishopfox/badpods

A collection of manifests that will create pods with elevated privileges.

rvrsh3ll/tokentactics

Azure JWT Token Manipulation Toolset

safedep/pmg

PMG protects developers, AI agents from malicious open source packages using proxy, sandbox and SafeDep's threat intelligence feed.

fencesandbox/fence

Lightweight, container-free sandbox for running commands with network and filesystem restrictions

mondoohq/cnspec

An open source, cloud-native security to protect everything from build to runtime

finbarr/yolobox

Let your AI go full send. Your home directory stays home.

zeus-labs/zeuscloud

Open-source cloud security platform that discovers attack paths, identifies misconfigurations, visualizes IAM access, and provides step-by-step…

denizparlak/zeus

AWS Auditing & Hardening Tool

iamthefrogy/frogy2.0

Orbis is an full spectrum automated external attack surface intelligent toolkit.

ustayready/credking

Password spraying using AWS Lambda for IP rotation

owasp/dvsa

a Damn Vulnerable Serverless Application

invictus-ir/microsoft-extractor-suite

A PowerShell module for acquisition of data from Microsoft 365 and Azure for Incident Response and Cyber Security purposes.

wso2/carbon-identity-framework

Core framework for identity and access management, providing authentication, authorization, and identity governance capabilities for enterprise…

alteredsecurity/365-stealer

Automates Illicit Consent Grant attacks against Azure/O365 tenants to steal refresh tokens, exfiltrate emails/OneDrive data, and create malicious…

mvelazc0/badzure

BadZure automates the deployment of intentionally misconfigured Entra ID tenants and Azure subscriptions, populating them with diverse entities and…

rhinosecuritylabs/ccat

Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.