This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Multi-Cloud Security Auditing Tool
Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources
CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
StreamAlert is a serverless, realtime data analysis framework which empowers you to ingest, analyze, and alert on data from any environment, using datasources and alerting logic you define.
Repository for BLESS, an SSH Certificate Authority that runs as a AWS Lambda function
IAM Least Privilege Policy Generator
Security Tool to Look For Interesting Files in S3 Buckets
BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.
A collection of AWS penetration testing junk
Learn cloud security by building it! An open-source homelab teaching Zero Trust, DevSecOps, IaC, and cloud architecture from the ground up.
honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway
AWS Identity and Access Management Visualizer and Anomaly Finder
analyze a web-based network traffic 🕶 to detect central command and control servers
A docker container to simplify and secure the use of Infrastructure as Code (IaC)
AWSDoor is a red team automation tool designed to simulate advanced attacker behavior in AWS environments
A script to automate the creation of cloud infrastructure for hash cracking.
- redteam-infrastructure
- redteaming
- pentest-tool
- password-cracker