Tools

azuread/azureadassessment

Tooling for assessing an Azure AD tenant state and configuration

nccgroup/aws-inventory

Discover resources created in an AWS account.

elttam/semgrep-rules

Static analysis security rules for vulnerability detection and audit-focused code review across Java, Go, Python, C#, Kotlin, PHP, Kubernetes, and…

ine-labs/gcpgoat

GCPGoat : A Damn Vulnerable GCP Infrastructure

dowjones/hammer

Dow Jones Hammer : Protect the cloud with the power of the cloud(AWS)

padok-team/yatas

:owl::mag_right: A simple tool to audit your AWS/GCP infrastructure for misconfiguration or potential security issues with plugins integration

elc0mpa/aws-doctor

Powerful open-source CLI to audit security, costs, and best practices in AWS. 🩺 ☁️

cloudgraphdev/cli

The universal GraphQL API and CSPM tool for AWS, Azure, GCP, K8s, and tencent.

batfish/pybatfish

Python client for Batfish, a network configuration analysis tool that validates security, reliability, and compliance by modeling network behavior…

arkadiyt/aws_public_ips

Fetch all public IP addresses tied to your AWS account. Works with IPv4/IPv6, Classic/VPC networking, and across all AWS services

dev-sec/chef-ssh-hardening

This chef cookbook provides secure ssh-client and ssh-server configurations.

hardenedlinux/harbian-audit

Hardened Debian GNU/Linux distro auditing

ankane/s3tk

A security toolkit for Amazon S3

summitroute/aws_exposable_resources

Curated catalog of AWS resource types that can be publicly exposed, with CLI commands for creating and auditing public access configurations across…

rams3sh/aaia

AWS Identity and Access Management Visualizer and Anomaly Finder

tenable/cnappgoat

CNAPPgoat is an open source project designed to modularly provision vulnerable-by-design components in cloud environments.

getkern/kern

Rootless container runtime and sandbox that launches kernel-enforced OCI images in milliseconds with no daemon, featuring resource profiles, seccomp…