cloudnative-security Goto Github PK

0days-in-the-wild

Repository for information about 0-days exploited in-the-wild.

airiam

Least privilege AWS IAM Terraformer

amazon-eks-devsecops

attacking-cloudgoat2

A step-by-step walkthrough of CloudGoat 2.0 scenarios.

authorino

Cloud-native AuthN/AuthZ enforcer to protect your APIs.

awesome-aws-security

Curated list of links, references, books videos, tutorials (Free or Paid), Exploit, CTFs, Hacking Practices etc. which are related to AWS Security

awesome-cloud-security

🛡️ Awesome Cloud Security Resources ⚔️

awesome-prometheus-alerts

🚨 Collection of Prometheus alerting rules

awesome-threat-intel-rss

A curated list of Awesome Threat Intelligence blogs

aws-attack

AWS ATT&CK is an exploitation framework with predefined MITRE ATT&CK techniques designed to target AWS environments.

aws-control-tower-guardduty-enabler

aws-foundations-cis-baseline

InSpec profile to validate your VPC to the standards of the CIS Amazon Web Services Foundations Benchmark v1.1.0

aws-s3-baseline

Example: A micro InSpec baseline to check for insecure or public s3 buckets in your vpc

aws-security-workshops

A collection of the latest AWS Security workshops

beef

The Browser Exploitation Framework Project

beroot

Privilege Escalation Project - Windows / Linux / Mac

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

checkov

Prevent cloud misconfigurations during build-time for Terraform, Cloudformation, Kubernetes, Serverless framework and other infrastructure-as-code-languages with Checkov by Bridgecrew.

cis-aws-foundations-hardening

(WIP) A terraform / kitchen-terraform hardening baseline for the cis-aws-foundations-baseline

clean

Get rid of unnecessary files to free up space on macOS

cloud-custodian

Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources

cloud-security-audit

A command line security audit tool for Amazon Web Services

cloudgoat

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

cloudmapper

CloudMapper helps you analyze your Amazon Web Services (AWS) environments.

cloudsploit

Cloud Security Posture Management (CSPM)

cve-2019-5736

darkside

Tool Information Gathering & social engineering Write By [Python,JS,PHP]

dirty-cow-cve-2016-5195-

Exploit the dirtycow vulnerability to login as root

dirtycow.github.io

Dirty COW

dnsx

dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.