CloudGoat is a 'Vulnerable by Design' AWS deployment tool for honing cloud cybersecurity skills through 'capture-the-flag' style scenarios.
#AWS tools
160 results · page 4
A tool that assesses AWS accounts for subdomain hijacking vulnerabilities in Route53 and CloudFront configurations.
A tool to analyze and audit AWS environments for security issues and misconfigurations.
AWS IAM Security Assessment tool for identifying violations of least privilege and generating risk-prioritized reports.
Cloud security configuration monitoring
Open-source project for detecting security risks in cloud infrastructure accounts with support for AWS, Azure, GCP, OCI, and GitHub.
CloudTracker helps identify over-privileged IAM users and roles by analyzing CloudTrail logs.
A project that sets up partitioned Athena tables for CloudTrail logs and updates partitions nightly.
Multi-cloud OSINT tool for enumerating public resources in AWS, Azure, and Google Cloud.
A script that implements Cognito attacks such as Account Oracle or Priviledge Escalation
A secret keeper that stores secrets in DynamoDB, encrypted at rest.
A web service for easier AWS IAM permissions and credential management with various login methods and IAM Self-Service Wizard.
CredStash is a tool for managing and securely storing credentials.
A tool for finding AWS credentials in files, optimized for Jenkins integration.
DataCop is a custom AWS framework for mitigating S3 bucket attack vectors based on customer configuration.
Diffy is a digital forensics and incident response (DFIR) tool developed by Netflix's Security Intelligence and Response Team (SIRT) for scoping compromises across cloud instances.
A tutorial on setting up Dionaea on an EC2 instance in 20 minutes
Multi-account cloud security tool for AWS with real-time reporting and auto-remediation capabilities.
A tool for searching through public EBS snapshots for secrets, organized as an Elastic Beanstalk application.
Identify AWS IAM permissions by brute-forcing API calls.
A comprehensive analysis of AWS IAM Access Analyzer, evaluating its capabilities, limitations, and effectiveness in identifying publicly exposed AWS resources.
A proof of concept for using the SSM Agent in Fargate for incident response
A tool for discovering open S3 Buckets starting from a domain using various techniques such as crawling and DNS crawling.
A series of levels teaching about common mistakes and gotchas when using Amazon Web Services (AWS).
Load more tools
Showing 96 of 160