3 个仓库
Evaluates cloud environments for misconfigured resources and overly permissive settings across major providers.
Distinct from Cloud Infrastructure Providers: Distinct from Cloud Infrastructure Providers: focuses on security assessment of cloud configurations, not the infrastructure provisioning itself.
Explore 3 awesome GitHub repositories matching devops & infrastructure · Cloud Security Assessors. Refine with filters or upvote what's useful.
Naabu is a port scanner library and tool that probes hosts for open ports using SYN, CONNECT, and UDP methods to identify active services. It functions as a Go library for embedding port scanning into programs, and as a standalone tool that accepts targets as hostnames, IP addresses, CIDR ranges, or ASN numbers. The tool discovers live hosts before scanning, filters ports by range or top lists, and can integrate with Nmap for service version detection. The project distinguishes itself through its SYN-based port probing approach that sends TCP SYN packets and analyzes responses without complet
Evaluates cloud environments for misconfigured resources and overly permissive settings.
Pacu is an exploitation framework designed for auditing and testing the security of Amazon Web Services environments. It serves as a cloud penetration testing tool and resource enumerator used to identify misconfigurations, map attack surfaces, and execute privilege escalation paths. The framework provides specialized capabilities for post-exploitation and red team operations, including establishing persistence through identity and access management backdooring. It distinguishes itself with a plugin-based module system that allows for the development of custom tasks and the orchestration of A
Modifies cloud settings to identify configuration flaws and security vulnerabilities.
CloudPentestCheatsheets is a knowledge base and curated set of technical instructions for executing penetration tests on cloud-native architecture. It serves as a security audit guide and cheat sheet for auditing security and identifying misconfigurations across major cloud environments. The project provides structured materials for performing cloud penetration testing, security auditing, and asset enumeration. These resources are organized to support multi-cloud security assessments through the evaluation of offensive security postures across various cloud service providers. The technical g
Evaluates cloud environments for misconfigured resources and overly permissive settings across major providers.