Aurea
roxanne_ardary/aureaAurea is an open-source, AI-powered platform that secures infrastructure-as-code (IaC) across Terraform, Kubernetes, Docker, and Ansible. It…
ai-securitycloud-infrastructure-securitycontainer-security+5
roxanne_ardary/aureaAurea is an open-source, AI-powered platform that secures infrastructure-as-code (IaC) across Terraform, Kubernetes, Docker, and Ansible. It…
pyperanger/dockerevilWorldFirst (Public) Docker API Exploit - My security researches involving Docker and Openshift
owasp/kubelightOWASP Kubernetes security and compliance tool [WIP]
controlplaneio/kubesecSecurity risk analysis for Kubernetes resources
natlas/natlasAttack Surface Management since before Attack Surface Management was a thing
xlab-si/iac-scan-runnerService that scans your Infrastructure as Code for common vulnerabilities
skydive-project/skydiveAn open source real-time network topology and protocols analyzer
arkadiyt/aws_public_ipsFetch all public IP addresses tied to your AWS account. Works with IPv4/IPv6, Classic/VPC networking, and across all AWS services
primait/nuvolaGraph-based AWS security analysis tool that dumps cloud configurations, detects misconfigurations, and maps attack paths using a Neo4j digital twin…
cyberark/blobhunterFind exposed data in Azure with this public blob scanner
guilherme-grimm/graph-gosimply nodes and graphs
nccgroup/conmachiContainer Blackbox Security Auditing Tool: enumerates security configuration from within the target container
semonte/sisuMounts AWS resources as a local filesystem for infrastructure exploration, security auditing, and configuration analysis using standard Unix tools…
ooafa/bucketbusterScans public cloud object-storage endpoints across Yandex, VK, Selectel, Sber, Alibaba, Tencent, Huawei, and Baidu to find listable buckets and…
h4wkst3r/dop2mopOpenGraph collector for BloodHound that maps attack paths from DevOps to MLOps infrastructure, collecting CI/CD pipeline, service principal, and ML…
offsecpierogi/azureBash and PowerShell scripts for Azure security assessments, covering IAM privilege escalation, container registry exploitation, Key Vault exposure,…
joshlarsen/aws-reconMulti-threaded AWS inventory collection tool with a focus on security-relevant resources and metadata.
nestybox/sysboxAn open-source, next-generation "runc" that empowers rootless containers to run workloads such as Systemd, Docker, Kubernetes, just like VMs.