Awesome GitHub RepositoriesCloud Security Tools

Naabu is a port scanner library and tool that probes hosts for open ports using SYN, CONNECT, and UDP methods to identify active services. It functions as a Go library for embedding port scanning into programs, and as a standalone tool that accepts targets as hostnames, IP addresses, CIDR ranges, or ASN numbers. The tool discovers live hosts before scanning, filters ports by range or top lists, and can integrate with Nmap for service version detection. The project distinguishes itself through its SYN-based port probing approach that sends TCP SYN packets and analyzes responses without complet

CDK 是一套专门用于容器安全审计、容器逃逸利用和云基础设施渗透测试的工具集。它提供了一系列脚本和工具，旨在识别和利用容器运行时的漏洞，以突破隔离环境并在底层主机操作系统上执行命令。 该项目具有专门的 Docker 运行时利用套件，用于滥用 Docker API、procfs 和 cgroups 以获得未经授权的主机级访问。它包括通过 LXCFS、用户命名空间利用和主机磁盘挂载绕过隔离的特定技术，以及用于提取云元数据和审计服务帐户权限以在集群环境中提升权限的功能。 该工具包涵盖了广泛的安全审计功能，包括用于机密泄露和策略分析的 Kubernetes 集群审计、敏感文件和服务扫描，以及主机网络共享的检测。它还提供了用于建立反向 shell、在受限环境中部署有效载荷以及在最小容器内安装系统管理工具的实用程序。

S3Scanner is a security tool for auditing public access and misconfigured permissions across S3-compatible storage providers. It functions as a storage auditor and security scanner designed to identify open buckets, enumerate publicly accessible objects, and exfiltrate data from misconfigured cloud environments. The project is distinguished by its integration with message brokers, allowing it to consume target lists for large-scale cloud infrastructure audits. It also provides utilities for dumping the entire contents of misconfigured buckets to local directories and calculating the total siz

Automating situational awareness for cloud penetration tests.

六大云存储，泄露利用检测工具

云资产管理工具 目前工具定位是云安全相关工具，目前是两个模块 云存储工具、云服务工具， 云存储工具主要是针对oss存储、查看、删除、上传、下载、预览等等 云服务工具主要是针对rds、服务器的管理，查看、执行命令、接管等等

Create your own vulnerable by design AWS penetration testing playground

This Repo serves as a collection of shared security and penetration testing resources for the cloud.