Tools

duo-labs/cloudmapper

CloudMapper helps you analyze your Amazon Web Services (AWS) environments.

deepfence/packetstreamer

⭐ ⭐ Distributed tcpdump for cloud native environments ⭐ ⭐

wenekar/procinfo

Get process information straight from bash, minimal dependencies.

nccgroup/conmachi

Container Blackbox Security Auditing Tool: enumerates security configuration from within the target container

skydive-project/skydive

An open source real-time network topology and protocols analyzer

siriusscan/sirius

Open-source vulnerability scanner with automated network discovery, CVE-based detection, CVSS scoring, risk dashboards, remote agents via gRPC, and a…

milesrichardson/docker-onion-nmap

Scan .onion hidden services with nmap using Tor, proxychains and dnsmasq in a minimal alpine Docker container.

sandialabs/dr_robot

This tool can be used to enumerate the subdomains associated with a company by aggregating the results of multiple OSINT (Open Source Intelligence)…

pqcworld/pqaudit

Scan codebases for quantum-vulnerable cryptography. Detect RSA, ECDSA, Ed25519, ECDH before Q-Day. CycloneDX CBOM + SARIF output.

lglznl/klaios

KLAIOS is a hybrid security environment that merges Kali Linux’s offensive toolkit with hardened, VPN-bunker-style isolation—enhanced by modern AI…

ullaakut/gorsair

Gorsair gives root access on remote docker containers that expose their APIs

cloudprober/cloudprober

An active monitoring software to detect failures before your customers do.

authrequest/freeloader

Plex Unlocker

natlas/natlas

Attack Surface Management since before Attack Surface Management was a thing

guilherme-grimm/graph-go

simply nodes and graphs

nccgroup/cloud_ip_ranges

Identify IP addresses owned by public cloud providers

znakar/sharktooth

Port Scanner with Docker & Prometheus + Grafana integration. A tool for network auditing with multithreading support and real-time monitoring.

loresuso/psc

the ps utility, with an eBPF twist and container context