hammer
dowjones/hammerMulti-account AWS security tool that detects misconfigurations and insecure data exposures across S3, IAM, EBS, RDS, SQS, CloudTrail, and AMIs, with…
cloud-infrastructure-securitycloud-securityconfiguration-auditing+3
450
dowjones/hammerMulti-account AWS security tool that detects misconfigurations and insecure data exposures across S3, IAM, EBS, RDS, SQS, CloudTrail, and AMIs, with…
primait/nuvolaGraph-based AWS security analysis tool that dumps cloud configurations, detects misconfigurations, and maps attack paths using a Neo4j digital twin…
salesforce/cloudsplainingAWS IAM security assessment tool that scans policies for least-privilege violations, identifies data exfiltration, privilege escalation, and…
nccgroup/scout2Security auditing tool for AWS environments
denizparlak/zeusBash-based AWS auditing and hardening tool that checks EC2, S3, CloudTrail, CloudWatch, and KMS against CIS AWS Benchmark, then applies recommended…
joshlarsen/aws-reconMulti-threaded AWS inventory collection tool with a focus on security-relevant resources and metadata.
randomrobbiebf/bucket-brutePython tool for AWS S3 bucket takeover: exploits misconfigured buckets by uploading a file to claim ownership. Used in penetration testing and cloud…
appliscale/cloud-security-auditA command line security audit tool for Amazon Web Services
duo-labs/cloudmapperAnalyze AWS environments for security misconfigurations, audit IAM policies, map network topology, and identify unused resources with a comprehensive…
skyscanner/lambdaguardAWS Lambda auditing tool for asset visibility, statistical analysis, dependency mapping, and security configuration checks across serverless…
tenable/cnappgoatMulti-cloud vulnerable-by-design environment deployment tool for practicing detection and exploitation of cloud security misconfigurations across…
skyscanner/cfripperLibrary and CLI tool for analysing CloudFormation templates and check them for security compliance.
elc0mpa/aws-doctorPowerful open-source CLI to audit security, costs, and best practices in AWS. 🩺 ☁️
padok-team/yatas:owl::mag_right: A simple tool to audit your AWS/GCP infrastructure for misconfiguration or potential security issues with plugins integration
bridgecrewio/checkovStatic analysis tool for infrastructure as code that detects cloud misconfigurations, vulnerabilities, and secrets across Terraform, Kubernetes,…
nccgroup/scoutsuiteMulti-cloud security auditing tool that leverages cloud provider APIs to gather configuration data, assess security posture, and generate HTML…
securityftw/cs-suiteCloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.
nccgroup/pmapperA tool for quickly evaluating IAM permissions in AWS.