#1Tools for assessing, testing, and securing cloud environments (AWS, Azure, GCP) and their services.
Kitploit recommended
opsxcq/exploit-cve-2014-6271Shellshock exploit + vulnerable environment
shipsecai/studioWorkflow automation for Security Teams
redhuntlabs/kubestalkBlack-box Kubernetes attack surface discovery tool that probes for unsecured clusters, exposed dashboards, and misconfigurations using…
bert-janp/entratraceDefensive research tool that documents observable API endpoints and user agents of offensive tooling targeting Microsoft Entra ID, supporting…
dipjyotimetia/hybridtestframeworkEnd to End testing of Web, API, Cloud, Events and Security
kontext-security/kontext-cliRuntime security for AI agents: discover agents, map their permissions, and enforce what they can do.
justinsteven/advisoriesPersonal repository of security advisory disclosures covering vulnerabilities in web, cloud, infrastructure, and open-source software.
flangvik/azurec2relayAzure Function that validates and relays Cobalt Strike beacon traffic using malleable C2 profiles, redirecting invalid requests to a decoy site and…
g0ldencybersec/easyeasmZero-dollar attack surface management tool
padok-team/yatas:owl::mag_right: A simple tool to audit your AWS/GCP infrastructure for misconfiguration or potential security issues with plugins integration
flangvik/cobaltbusCobalt Strike External C2 Integration With Azure Servicebus, C2 traffic via Azure Servicebus
hakaioffsec/ingressnightmare-pocThis is a PoC code to exploit the IngressNightmare vulnerabilities (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974).
permiso-io-tools/cloudgrapplerQuery high-fidelity cloud detections for known threat actors across AWS, Azure, and GCP using CloudTrail logs and custom threat intelligence rules.
dsccommunity/certificatedscDSC resources to simplify administration of certificates on a Windows Server.
koenrh/s3enumFast and stealthy Amazon S3 bucket enumeration tool for pentesters.
juanjosanz/aws-pentesting-labPentesting lab with a Kali Linux instance accessible via ssh & wireguard VPN and with vulnerable instances in a private subnet
blacknon/lsshA terminal-native remote access suite for SSH, cloud inventories, provider-backed connectors, parallel commands, mux workspaces, file transfer, and…
hackerhouse-opensource/cve-2018-10933Docker-based CVE-2018-10933 libssh authentication bypass exploit with patched client for testing SSH server vulnerabilities and unauthorized access…
