#1Tools for assessing, testing, and securing cloud environments (AWS, Azure, GCP) and their services.
Kitploit recommended
eeriedusk/nysmeBPF-based stealth container that hides processes, sockets, eBPF objects, and audit logs from system monitoring tools, enabling covert…
xmcyber/xmgoatTerraform-based Azure security lab with intentionally misconfigured environments for hands-on attack and compromise practice. Includes scenario flows…
boringtools/git-alertsTool to detect and monitor GitHub org users' public repositories for secrets and sensitive files
nccgroup/whalescanWhalescan is a vulnerability scanner for Windows containers, which performs several benchmark checks, as well as checking for CVEs/vulnerable…
anshumanbh/kubebotA security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform
olizimmermann/s3dnsPassive DNS server that detects exposed cloud storage buckets (AWS S3, GCP, Azure) by resolving DNS requests, tracing CNAME chains, and flagging…
op7ic/blueteam.labBlue Team detection lab created with Terraform and Ansible in Azure.
cyberark/skywrapperSkyWrapper helps to discover suspicious creation forms and uses of temporary tokens in AWS
litmuschaos/chaos-operatorKubernetes operator for injecting chaos experiments into cloud-native workloads, automating resilience testing and workload hardening through…
mondoohq/installerLinux, macOS and Windows Install scripts for cnquery & cnspec
redsiege/autofunktPython script for automating the creation of serverless cloud redirectors from Cobalt Strike malleable C2 profiles
iaga-team/iaga-sentinelCryptographically signed, replay-verifiable evidence layer for AI agents. Governs actions in the loop, produces Ed25519-signed receipts linked into a…
lore-hex/quill-routerTrustedRouter.com repo for secure LLM proxying
iknowjason/bluecloudCyber Range including Velociraptor + HELK system with a Windows VM for security testing and R&D. Azure and AWS terraform support.
facebook/mcpguard-dynamicKernel-level eBPF sandbox for securing LLM agent tool calls made through the Model Context Protocol (MCP)
anssi-fr/dfir4vspherePowershell module for VMWare vSphere forensics
ricccrd/ddJIT-based userspace Linux kernel that runs containers natively on Apple Silicon macOS without a VM. Drop-in Docker Engine API replacement with…
cred-club/dialEvent-driven AWS security misconfiguration detection framework that monitors multiple accounts in real-time, triggering alerts via Lambda for IAM,…
