#1Tools for assessing, testing, and securing cloud environments (AWS, Azure, GCP) and their services.
Kitploit recommended
milesrichardson/docker-onion-nmapScan .onion hidden services with nmap using Tor, proxychains and dnsmasq in a minimal alpine Docker container.
rhinosecuritylabs/gcpbucketbruteA script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.
azuread/azureadassessmentTooling for assessing an Azure AD tenant state and configuration
bishopfox/cloudfoxableCreate your own vulnerable by design AWS penetration testing playground
beetlechunks/spoolsploitA collection of Windows print spooler exploits containerized with other utilities for practical exploitation.
scille/parsec-cloudOpen source Dropbox-like file sharing with full client encryption !
aaaguirrep/offensive-dockerOffensive Docker is an image with the more used offensive tools to create an environment easily and quickly to launch assessment to the targets.
pensarai/apexAI-powered offensive security testing using autonomous agents, directly in your terminal.
legit-labs/legitifyDetect and remediate misconfigurations and security risks across all your GitHub and GitLab assets
eilonh/s3crets_scannerAutomated scanner that hunts for secrets (API keys, credentials) accidentally uploaded to public S3 buckets, using truffleHog3 for detection and…
nccgroup/aws-inventoryDiscover resources created in an AWS account.
duggytuxy/syswardenHost-local Linux security orchestrator enforcing nftables policy with HIDS/HIPS telemetry, bounded threat-intelligence feeds, out-of-band WAAP log…
natlas/natlasAttack Surface Management since before Attack Surface Management was a thing
ankane/s3tkA security toolkit for Amazon S3
0x4d31/honeylambdahoneyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS…
ine-labs/gcpgoatGCPGoat : A Damn Vulnerable GCP Infrastructure
boku7/azureoutlookc2Azure Outlook Command & Control (C2) - Remotely control a compromised Windows Device from your Outlook mailbox. Threat Emulation Tool for North…
