Awesome GitHub RepositoriesCloud Metadata Simulation

aws-vault is a secure credential manager and command-line wrapper for AWS. It stores long-term identity keys using the native operating system secure keystore to prevent plaintext secrets from residing on disk. The tool orchestrates the exchange of long-term credentials for short-lived temporary sessions by assuming IAM roles, with support for multi-factor authentication and integration with AWS Identity Center for single sign-on access. It prevents credential exposure by injecting these temporary tokens directly into subprocesses or by simulating local metadata endpoints for software develop

Naabu is a port scanner library and tool that probes hosts for open ports using SYN, CONNECT, and UDP methods to identify active services. It functions as a Go library for embedding port scanning into programs, and as a standalone tool that accepts targets as hostnames, IP addresses, CIDR ranges, or ASN numbers. The tool discovers live hosts before scanning, filters ports by range or top lists, and can integrate with Nmap for service version detection. The project distinguishes itself through its SYN-based port probing approach that sends TCP SYN packets and analyzes responses without complet

Interactsh 是一个带外（out-of-band）安全测试框架和交互服务器，旨在检测服务器端请求伪造（SSRF）和盲注（blind injections）等漏洞。它作为一个多协议交互收集器，捕获 DNS、HTTP 和 SMTP 请求，以验证来自远程应用的对外通信。 该项目提供了一个自托管交互网关，用于管理唯一载荷（payloads）并收集跨多个域的网络交互。它的独特之处在于能够模拟各种网络协议和响应行为，包括将请求路由到云元数据服务以识别特定漏洞。 该系统涵盖了广泛的功能，包括通过 ACME 为通配符域自动管理 SSL 证书、通过 Webhook 和第三方平台进行实时事件通知，以及托管用于注入测试的静态载荷。它还包括用于会话状态持久化和查询驱动响应控制的机制，以管理服务器如何处理传入请求。