Awesome GitHub RepositoriesCloud Security Tooling and Automation

Prowler is a multi-cloud security scanner and security posture management tool. It automates security and compliance assessments across multiple cloud environments to identify misconfigurations and vulnerabilities. The project provides a multi-cloud security analysis engine that operates as an automated auditor, evaluating infrastructure against industry-standard regulatory frameworks and security benchmarks. It features a cloud security visualization dashboard that uses a graph database to map cloud inventory and visualize potential attack paths. Capabilities include automated cloud infrast

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

aws-vault is a secure credential manager and command-line wrapper for AWS. It stores long-term identity keys using the native operating system secure keystore to prevent plaintext secrets from residing on disk. The tool orchestrates the exchange of long-term credentials for short-lived temporary sessions by assuming IAM roles, with support for multi-factor authentication and integration with AWS Identity Center for single sign-on access. It prevents credential exposure by injecting these temporary tokens directly into subprocesses or by simulating local metadata endpoints for software develop

ScoutSuite is a multi-cloud security audit and configuration tool designed to identify security risks and misconfigurations across cloud environments. It functions as a security posture manager and compliance auditor, gathering resource metadata from cloud APIs to evaluate infrastructure against security benchmarks. The tool provides auditing capabilities for AWS, Google Cloud, DigitalOcean, and Kubernetes clusters and control planes. It distinguishes itself by decoupling data collection from analysis, allowing users to cache cloud configurations locally for offline auditing and iterative rul

Pacu ist ein Exploitation-Framework, das für das Auditieren und Testen der Sicherheit von Amazon Web Services (AWS)-Umgebungen entwickelt wurde. Es dient als Cloud-Penetration-Testing-Tool und Ressourcen-Enumerator, um Fehlkonfigurationen zu identifizieren, Angriffsflächen abzubilden und Pfade zur Privilegieneskalation auszuführen. Das Framework bietet spezialisierte Funktionen für Post-Exploitation- und Red-Team-Operationen, einschließlich der Etablierung von Persistenz durch Backdooring von Identity and Access Management (IAM). Es zeichnet sich durch ein Plugin-basiertes Modulsystem aus, das die Entwicklung benutzerdefinierter Aufgaben und die Orchestrierung von API-Anfragen über mehrere geografische Regionen hinweg ermöglicht. Das Projekt deckt ein breites Spektrum an Sicherheitsaudit-Aktivitäten ab, einschließlich Infrastruktur-Enumeration, Datenexfiltration aus Speicherdiensten und Identitäts-Audits. Es enthält Tools für Remote Code Execution via Payload-Injection und Startskripte sowie Funktionen zur Störung von Erkennungsdiensten und zur Analyse lateraler Netzwerkbewegungen. Pacu verwaltet zielspezifische Authentifizierungsschlüssel und Sitzungsmetadaten unter Verwendung isolierter Container und einer lokalen Datenbank, um den Status beizubehalten und API-Aufrufe zu reduzieren.

A Central Control Plane for AWS Permissions and Access

Automating situational awareness for cloud penetration tests.

AWS Auditing & Hardening Tool

Collection of scripts and resources for DevSecOps and Automated Incident Response Security

Open source demos, concept and guidance related to the AWS CIS Foundation framework.

Enhance the security of your web applications effortlessly with AWS Firewall Factory. Safeguard your valuable assets through seamless WAF deployment, updates, and staging, all centrally managed with AWS Firewall Manager.

Runs IAM policy linting and security checks against either a single AWS account or multiple member accounts of an AWS Organization.

Find S3 AWS/GCP/Azure buckets while surfing. S3DNS acts as DNS server, follows CNAMEs and matches any bucket pattern

Fast, opinionated AWS security scanner. Curated checks. Zero noise. Copy-paste fixes.