f8x

A brand-new IaC automated deployment tool RedC, built on Terraform + Wails GUI for automated multi-cloud deployment and project orchestration—give it a try! Red/Blue team environment automation deployment tool Start • Options • Example • FAQ • License English | 简体中文 WgpSec Infra Ecosystem Within...

cloudtoolkit

CloudToolKit English | 简体中文 Multi-cloud defensive validation toolkit for CSPM / CNAPP detection, telemetry, and investigation workflows in authorized environments. CloudToolKit gives security teams a practical way to verify whether cloud controls are discoverable, detectable, alertable, and...

ElectricEye

ElectricEye ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring supporting 100s of services and evaluations to harden your CSP & SaaS environments with controls mapped to over 20 industry, regulatory, and best...

ScoutSuite

Description Scout Suite is an open source multi-cloud security-auditing tool, which enables security posture assessment of cloud environments. Using the APIs exposed by cloud providers, Scout Suite gathers configuration data for manual inspection and highlights risk areas. Rather than going throu...

CloudSec

Cloud Security Toolkit The Art of Cloud Exploitation Welcome to the Cloud Security Toolkit—a specialized resource designed for offensive security researchers, red teamers, and adversaries. This repository is dedicated to the systematic weaponization of vulnerabilities, advanced attack simulations...

cloudlist

Features • Installation • Usage • Configuration • Running cloudlist • Supported providers • Library • Join Discord Cloudlist is a multi-cloud tool for getting Assets from Cloud Providers. This is intended to be used by the blue team to augment Attack Surface Management efforts by maintaining a...

cnappgoat

!made-with-Gomade-with-go-img !GitHub Releaserelease-imgrelease !Go Report Cardgo-report-imggo-report !License: Apache-2.0license-imglicense !Maintainermaintainer-1 CNAPPgoat CNAPPgoat is a multi-cloud, vulnerable-by-design environment deployment tool – specifically engineered to facilitate...

cliam

cliam Multi cloud iam permissions enumeration tool. Currently covers: AWS GCP Azure Oracle 🚧 WIP Description Cliam is a simple cloud permissions identifier. There are two main components to the CLI. Most of the enumerated permissions are list, describe or get permissions. enumerate which can be...

cs-suite

Cloud Security Suite cs-suite - Version 3.0 Usage usage: cs.py -h -env aws,gcp,azure,digitalocean -aip AUDITIP -u USERNAME -pem PEMFILE -p -pId PROJECTID -azu AZUREUSER -azp AZUREPASS -o OUTPUT -w -n NUMBER this is to get IP address for lynis audit only optional arguments: -h, --help show this he...

cloud_enum

cloudenum L'avenir de cloudenum J'ai créé cet outil en 2019 pour un pentest impliquant Azure, car aucun autre outil d'énumération ne le prenait en charge à l'époque. Il s'est développé à partir de là, et j'ai beaucoup appris en ajoutant des fonctionnalités. Créer des outils est amusant, mais les...

cloudlist

Fonctionnalités • Installation • Utilisation • Configuration • Exécution de cloudlist • Fournisseurs supportés • Bibliothèque • Rejoindre Discord Cloudlist est un outil multi-cloud permettant d'obtenir des actifs Assets depuis les fournisseurs cloud. Il est conçu pour être utilisé par l'équipe...

TerraformGoat

TerraformGoat English | 中文 TerraformGoat is HXSecurity research lab's "Vulnerable by Design" multi cloud deployment tool. Currently supported cloud vendors include Alibaba Cloud, Tencent Cloud, Huawei Cloud, Amazon Web Services, Google Cloud Platform, Microsoft Azure. 🎯 Scenarios ID| Cloud Servic...

cloudquery

CloudOps, sans le chaos CloudQuery est un inventaire d'actifs cloud conçu pour les équipes de plateforme. Synchronisez les métadonnées de votre infrastructure cloud dans votre entrepôt de données, alimentant ainsi les analyses et l'automatisation. Unifiez les données et apportez du contexte entre...

lazywarden

Secure, Automated, and Multi-Cloud Bitwarden Backup and Import System Lazywarden is a Python automation tool designed to Backup and Restore data from your vault, including Bitwarden attachments. It allows you to upload backups to multiple cloud storage services and receive notifications across...

lazywarden

Système de sauvegarde et d'importation Bitwarden sécurisé, automatisé et multi-cloud Lazywarden est un outil d'automatisation Python conçu pour sauvegarder et restaurer les données de votre coffre, y compris les pièces jointes Bitwarden. Il vous permet de télécharger les sauvegardes vers plusieur...

cloud-custodian

Cloud Custodian c7n Cloud Custodian, également connu sous le nom de c7n, est un moteur de règles pour la gestion des comptes et des ressources cloud publics. Il permet aux utilisateurs de définir des politiques pour une infrastructure cloud bien gérée, à la fois sécurisée et optimisée en termes d...

cliam

cliam Outil d'énumération des permissions IAM multi-cloud. Couvre actuellement : AWS GCP Azure Oracle 🚧 En cours Description Cliam est un simple identifiant de permissions cloud. Il comporte deux composants principaux en ligne de commande. La plupart des permissions énumérées sont des permissions...

riskscanner

Open source multi-cloud security compliance scanning platform Chinese Version RiskScanner is an open source multi-cloud security compliance scanning platform, Based on Cloud Custodian、Prowler and Nuclei engines, it realizes security compliance scanning and vulnerability scanning of mainstream...

The Vault by Focused Hunts

The Vault Your Secrets. Your Control. Most password managers want you to trust a company you don't know with your sensitive data. They control the servers and the keys, and you have to hope nothing goes wrong. The Vault does things differently. Your encrypted vault files stay on cloud storage you...

Turning threat intelligence into decisive action with Defender Experts

In this article 1. Upstream: See the campaign before it reaches you 1. In your environment: Follow the threat everywhere it moves 2. See it live at Black Hat USA Security teams have never had more visibility, yet rarely have they felt more uncertain. Signal pours in from endpoints, identities,...