#1Tools for testing and securing serverless functions (e.g., AWS Lambda, Azure Functions) and their integrations.
Kitploit recommended
fyoorer/shadowcloneServerless task distribution framework that parallelizes CLI tools across thousands of cloud functions for rapid reconnaissance and data processing.
owasp/dvsaa Damn Vulnerable Serverless Application
pumasecurity/serverless-preyServerless Functions for establishing Reverse Shells to Lambda, Azure Functions, and Google Cloud Functions
owasp/serverless-goatOWASP ServerlessGoat: a serverless application demonstrating common serverless security flaws
capsulerun/capsuleSecure runtime to sandbox AI agent tasks. Run untrusted code in isolated WebAssembly environments.
owasp/serverless-top-10-projectOWASP Serverless Top 10
we45/dvfaas-damn-vulnerable-functions-as-a-serviceIntentionally Vulnerable Serverless Functions to understand the specifics of Serverless Security Vulnerabilities
jonrau1/syntheticsunServerless AWS security automation framework that ingests threat intelligence, applies ML-based anomaly detection (RCF, IP Insights), and enriches…
contrastsecurity/contrastSAST CLI for scanning Java, JavaScript, and .NET applications plus AWS Lambda functions, detecting code vulnerabilities and over-permissive IAM…
uziii2208/cve-2026-86259OpenMAIC 1.0.0: Unauthenticated Outbound SSRF to Cloud Metadata Service via Fail-Open Middleware and Environment-Gated Validation Bypass
ivanesk315/cve-2026-28496Docker lab reproducing the FOSSBilling pre-auth RCE chain (CVE-2026-27604 auth bypass + CVE-2026-28496 Twig SSTI) with a Python PoC and patched…
george0papasotiriou/cve-2026-9999-serverless-event-injection-to-code-overwriteProof-of-concept exploit for CVE-2026-9999, demonstrating path traversal in serverless object storage events that overwrites function source code to…
george0papasotiriou/cve-2026-22015-serverless-function-environment-variable-injection-via-eventPoC for CVE-2026-22015: malicious event injects environment variables into serverless functions, overwriting secrets and enabling privilege…
george0papasotiriou/cve-2026-21002-serverless-cold-start-credential-leakage-via-reused-tmpPoC exploit for CVE-2026-21002 serverless cold-start credential leakage, demonstrating how reused Lambda /tmp directories expose AWS secrets to other…
george0papasotiriou/cve-2026-23007-serverless-cold-start-memory-remanence-data-leakage-Simulates CVE-2026-23007 serverless cold-start memory remanence; demonstrates how persistent global state across Lambda invocations can leak secrets…
roninforge/roninforge-honoCursor plugin for Hono v4 (TypeScript edge web framework). 59 LLM regressions with BAD/CORRECT pairs. Pinned to hono ^4.12.19 (>= 4.9.7 for…
simoesctt/ctt-serverless-rce-v1.0---convergent-time-theory-enhanced-mcp-exploitServerless Framework MCP Server (CVE-2025-69256) Base Score: 9.4/10 → CTT Enhanced Score: 9.9/10 A critical command injection vulnerability in…
skyscanner/lambdaguardAWS Serverless Security
