paulschwarzenberger

alb

AWS Application Load Balancer for testing mTLS with open-source cloud Certificate Authority

cloud-ca

Cloud CA built using AWS CA Terraform Module

aws-secretsmanager-get-secrets

terraform-aws-ca

Terraform module for serverless certificate authority on AWS

c-icap-server

aws-iam-roles-anywhere

Testing AWS IAM Roles Anywhere

aws-customer-security-incidents

A repository of breaches of AWS customers

STARS

A multi-cloud DNS record scanner that aims to help cybersecurity/IT analysts identify dangling CNAME records in their cloud DNS services that could possibly lead to subdomain takeover scenarios.

wstg

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

www-project-domain-protect

OWASP Foundation Web Respository

terraform-aws-github-runner

Terraform module for scalable GitHub action runners on AWS

domain-protect-gcp-deploy

Deploy Domain Protect in your GCP Organization using GitHub Actions

VertFlow

Run Docker containers on Airflow using green energy.

granted

The easiest way to access your cloud.

terraform-provider-aws

The AWS Provider enables Terraform to manage AWS resources.

domain-protect-deploy

Deploy Domain Protect in your AWS Organization using GitHub Actions

moto

A library that allows you to easily mock out tests based on AWS infrastructure.

cloud-security-vulnerabilities

List of all the Publicly disclosed vulnerabilities of Public Cloud Provider like Amazon Web Services (AWS), Microsoft Azure, Google Cloud, Oracle Cloud, IBM Cloud etc

subfinder

Fast passive subdomain enumeration tool.

aquatone

A Tool for Domain Flyovers

csp-ip-lookup

API and Website to check if an IP address belongs to a Cloud Service Provider

domain-protect

OWASP Domain Protect - prevent subdomain takeover

domain-protect-gcp

Protect against subdomain takeover

csp_security_mistakes

This repo has been replaced by https://www.cloudvulndb.org

botocove

A simple decorator to run Python functions across multiple AWS accounts, OUs and/or regions, with or without an AWS Organization.

gitoops

all paths lead to clouds

kiss

AWS-based secrets management for Kubernetes

ScoutSuite

Multi-Cloud Security Auditing Tool

cloud-custodian

Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources

prowler

Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more