1138 matches found
awesome-incident-response
Awesome Incident Response A curated list of tools and resources for security incident response, aimed to help security analysts and DFIR teams. Digital Forensics and Incident Response DFIR teams are groups of people in an organization responsible for managing the response to a security incident,...
Mindmaps
Pentesting Azure Mindmap Get the Global Admin access š„ with this mindmap for Azure penetration tests. Feel free to pull request with your techniques ! ā¤ļø Developed by Alexis Danizan Released as open source by Synacktiv š„· š Resources Useful resources used to build this mindmap, many outstanding...
cli
CloudGraph is the free open-source universal GraphQL API and Cloud Security Posture Management CSPM tool for AWS, Azure, GCP, and K8s. With CloudGraph you get: Free and effortless compliance checks i.e. Azure CIS 1.3.1, GCP CIS 1.2, AWS CIS 1.2, AWS CIS 1.3, AWS CIS 1.4, AWS PCI 3.2.1, AWS NIST...
CloudSec
Cloud Security Toolkit The Art of Cloud Exploitation Welcome to the Cloud Security Toolkitāa specialized resource designed for offensive security researchers, red teamers, and adversaries. This repository is dedicated to the systematic weaponization of vulnerabilities, advanced attack simulations...
ZeusCloud
Secure your cloud. ZeusCloud is an open source cloud security platform. Discover, prioritize, and remediate your risks in the cloud. Build an asset inventory of your AWS accounts. Discover attack paths based on public exposure, IAM, vulnerabilities, and more. Prioritize findings with graphical...
coalmine
Cloud Canary Token Management ā Deploy, monitor, and rotate deceptive credentials across AWS and GCP to detect unauthorized access. !WARNING Alpha Version ā Coalmine is in early development. Basic functionality is the current priority, and the application should not be considered fully security...
pentest-book
description: - This book contains a bunch of info, scripts and knowledge used during my pentests. /home/six2dez/.pentest-book Thanks to visit this site, please consider enhance this book with some awesome tools or techniques you know, you can contact me by Telegram@six2dez, Twitter@six2dez1 or...
CloudPrivs
CloudPrivs I got creds, now what? Overview CloudPrivs is a tool that leverages the existing power of SDKs like Boto3 to brute force privileges of all cloud services to determine what privileges exist for a given set of credentials. This tool is useful for Pentesters, Red Teamer's and other securi...
aws-security-assessment-solution
Soluciones de EvaluaciĆ³n de Seguridad Self-Service v2.0 La ciberseguridad sigue siendo un tema muy importante y un punto de preocupaciĆ³n para muchos CIOs, CISOs y sus clientes. Para abordar estas importantes inquietudes, AWS ha desarrollado un conjunto principal de servicios que los clientes debe...
pacu
Quick reference Where to get help : the Rhino Security Labs Discord, or Stack Overflow Where to file issues : https://github.com/RhinoSecurityLabs/pacu/issues Maintained by : Rhino Security Labs What is Pacu? Pacu is an open-source AWS exploitation framework, designed for offensive security testi...
CloudGrappler
CloudGrappler Permiso: https://permiso.io Read our release blog: https://permiso.io/blog/cloudgrappler-a-powerful-open-source-threat-detection-tool-for-cloud-environments CloudGrappler is a purpose-built tool designed for effortless querying of high-fidelity and single-event detections related to...
cloudsploit
CloudSploit de Aqua - Escaneos de Seguridad en la Nube Inicio RƔpido GenƩrico root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploi...
owasp-cstg
OWASP Cloud Security Testing Guide The Cloud Security Testing Guide CSTG is a comprehensive, vendor-neutral manual for testing the security of cloud environments. It is written for penetration testers, cloud and platform engineers, security architects, detection engineers, and auditors - anyone w...
cliam
cliam Herramienta de enumeraciĆ³n de permisos IAM multi-nube. Actualmente cubre: AWS GCP Azure Oracle š§ WIP DescripciĆ³n Cliam es un identificador simple de permisos en la nube. Hay dos componentes principales en la CLI. La mayorĆa de los permisos enumerados son permisos de listar, describir u...
SkyArk
SkyArk es un proyecto de seguridad en la nube con dos mĆ³dulos principales de escaneo: 1. AzureStealth - Escanea entornos de Azure 2. AWStealth - Escanea entornos de AWS Estos dos mĆ³dulos de escaneo descubrirĆ”n las entidades mĆ”s privilegiadas en los entornos AWS y Azure objetivo. El Objetivo...
security-study-plan
A Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps, and so on with free/paid resources, tools, and concepts to excel. It will cover but not limited to: Done 1. Common Skills for Security Study Plan 2. AWS Security...
EvilMist
EvilMist EvilMist is a collection of scripts and utilities designed to support cloud security configuration audit, cloud penetration testing & cloud red teaming. The toolkit helps identify misconfigurations, assess privilege-escalation paths, and simulate attack techniques. EvilMist aims to...
cumulus
OWASP Cumulus - Threat modeling the clouds Cumulus is the easy way to bring security into cloud and devOps teams. As a variant of the card game Elevation of Privilege it follows the idea to threat model a system via gamification. This lightweight and low-barrier approach helps you find threats to...
MAAD-AF
MAAD Attack Framework MAAD-AF is an open-source cloud attack tool for Microsoft 365 & Entra IDAzure AD environments. MAAD-AF offers simple, fast and effective security testing. Validate Microsoft cloud controls and test detection & response capabilities with a virutally zero-setup process, comple...
cloud-sniper
Cloud Sniper : Detection-as-code platform Cloud Sniper is a comprehensive platform meticulously designed to streamline Cloud Security Operations. It swiftly responds to security incidents by analyzing and correlating cloud artifacts, ensuring a holistic view of the company's cloud security postur...