cloud-security

There are 46 repositories under cloud-security topic.

wazuh / wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
cloud-security compliance configuration-assessement container-security cybersecurity file-integrity-monitoring incident-response infosec log-analysis malware-detection pci-dss security security-audit security-automation security-hardening security-tools siem vulnerability-detection wazuh xdr
Language:C 9334
terrascan
tenable / terrascan
Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.
architecture aws aws-security azure-security cloud-security cloudsecurity devops devsecops gcp-security iac infrastructure infrastructure-as-code kubernetes sast scans security security-tools security-violations terraform terrascan
Language:Go 4531
Hack-with-Github / Free-Security-eBooks
Free Security and Hacking eBooks
security hacking penetration-testing hacking-ebooks forensics hackers-handbook cloud-security kali-linux cyber-security ebooks
4155
kubernetes-goat
madhuakula / kubernetes-goat
Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀
blueteam cloud-native cloud-security cloudsecurity container container-security devsecops docker hacking infrastructure k8s kubernetes kubernetes-goat kubernetes-security owasp pentesting redteam security vulnerable-app
Language:HTML 4000
Netflix / consoleme
A Central Control Plane for AWS Permissions and Access
aws-iam aws security-tools cloud-security
Language:Python 3071
4ndersonLin / awesome-cloud-security
🛡️ Awesome Cloud Security Resources ⚔️
aws aws-security azure azure-security cloud-computing cloud-security cybersecurity gcp gcp-security security
1921
salesforce / cloudsplaining
Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.
aws aws-iam cloud security salesforce aws-security cloud-security iam hacktoberfest
Language:JavaScript 1870
cloudfox
BishopFox / cloudfox
Automating situational awareness for cloud penetration tests.
aws cloud cloud-security golang penetration-testing-tools security
Language:Go 1809
DataDog / stratus-red-team
:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud
adversary-emulation aws aws-security azure-security cloud-native-security cloud-security detection-engineering gcp-security kubernetes-security mitre-attack purple-team security threat-detection
Language:Go 1630
teamssix / awesome-cloud-security
awesome cloud security 收集一些国内外不错的云安全资源，该项目主要面向国内的安全人员
awesome awesome-cloud-security cloud-native cloud-security cloudnative cloudsecurity cybersecurity docker kubernetes tools
1601
hackingthe.cloud
Hacking-the-Cloud / hackingthe.cloud
An encyclopedia for offensive and defensive security knowledge in cloud native technologies.
hacking aws hacking-cloud azure gcp penetration-testing cloud cloud-security aws-hacking
Language:Dockerfile 1527
chaitin / veinmind-tools
veinmind-tools 是由长亭科技自研，基于 veinmind-sdk 打造的容器安全工具集
docker security image-security containerd container-security cloud-native cloud-security
Language:Go 1474
matano
matanolabs / matano
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
aws cloud security big-data serverless apache-iceberg log-analytics log-management threat-hunting rust alerting cloud-native aws-security cloud-security cybersecurity secops security-tools dfir detection-engineering siem
Language:Rust 1363
pacbot
tmobile / pacbot
PacBot (Policy as Code Bot)
angularjs aws aws-security cloud cloud-auditing cloud-compliance-reporting cloud-native cloud-security continous-compliance java policy-as-code security security-automation spring-boot
Language:Java 1267
SecurityFTW / cs-suite
Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.
aws-security security-audit cloud-security gcp-audit-report gcp aws-audit security azure-security azure azure-audit security-tools
Language:Shell 1131
awesome-aws-security
jassics / awesome-aws-security
Curated list of links, references, books videos, tutorials (Free or Paid), Exploit, CTFs, Hacking Practices etc. which are related to AWS Security
cloud-security aws-security awesome-list aws security security-tools aws-auditing awesome-lists aws-security-resources awesome aws-security-automation
1124
bridgecrewio / terragoat
TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.
terraform aws-security cloud-security goat azure-security gcp-security devsecops
Language:HCL 1104
paralus
paralus / paralus
All-in-one Kubernetes access manager. User-level credentials, RBAC, SSO, audit logs.
access-management cloud-security k8s-access-management kubernetes-security zero-trust-security ztka
Language:Go 937
common-fate / granted
The easiest way to access your cloud.
iam aws cloud sso credentials keychain cloud-security hacktoberfest
Language:Go 918
constellation
edgelesssys / constellation
Constellation is the first Confidential Kubernetes. Constellation shields entire Kubernetes clusters from the (cloud) infrastructure using confidential computing.
cloud-security confidential-computing data-encryption kubernetes kubernetes-security
Language:Go 874
ElectricEye
jonrau1 / ElectricEye
ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring supporting 100s of services and evaluations to harden your CSP & SaaS environments with controls mapped to over 20 industry, regulatory, and best practice controls frameworks
security-tools security-audit cloud-security security-monitoring aws-security security-hub cloud-compliance-reporting cloud-auditing security-engineering devsecops aws-audit aws-compliance compliance attack-surface-management aws gcp-security multicloud saas-security google-cloud-security asset-management
Language:Python 867
cyberark / SkyArk
SkyArk helps to discover, assess and secure the most privileged entities in Azure and AWS
admins attacker aws azure cloud cloud-security powershell privileges security-tools threat
Language:PowerShell 853
Zeyad-Azima / Offensive-Resources
A Huge Learning Resources with Labs For Offensive Security Players
api infrastructure learning security mobile web hack hacking owasp cybersecurity web-security mobile-security offensive offensive-security red-team owasp-top-10 redteam cloud-security api-security red-teaming
837
0xsha / CloudBrute
Awesome cloud enumerator
bugbounty cloud cloud-security s3-bucket amazon vultr google linode cloud-storage pentesting pentest-tool hacking redteam infosec digitalocean
Language:Go 788
aquasecurity / cloud-security-remediation-guides
Security Remediation Guides
cloud cloud-security aws azure
682
Funkmyster / awesome-cloud-security
A curated list of awesome cloud security blogs, podcasts, standards, projects, and examples.
cloud-security aws security information-security waf dlp logging cloud elasticsearch awesome awesome-list aws-security data-loss-prevention security-standards nist google-cloud-security hacktoberfest hacktoberfest2023 oracle-cloud-security hacktoberfestcebu
563
Esonhugh / Attack_Code
文章 Attack Code 的详细全文。安全和开发总是具有伴生属性，尤其是云的安全方向，本篇文章是希望能帮助到读者的云安全入门材料。Full text of the article Attack Code. Security and development always have concomitant attributes, and this is especially true with the security direction of the cloud. This article is an introduction to cloud security that I hope will help readers.
article cloud cloud-security cloudsecurity introduction security
Language:Shell 529
HXSecurity / TerraformGoat
TerraformGoat is HXSecurity research lab's "Vulnerable by Design" multi cloud deployment tool.
security terraform gcp cloudsecurity aws-security azure-security gcp-security kubernetes-security cloud-security
Language:HCL 505
stackql
stackql / stackql
Query, provision and operate Cloud and SaaS resources and APIs using an extensible SQL based framework
asset-management cloud cloud-automation cloud-config cloud-operations cloud-security cspm devops devsecops infrastructure-as-code openapi3 sql stackql hacktoberfest
Language:Go 443
redhuntlabs / BucketLoot
BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as well as Regular Expressions from publicly-exposed storage buckets by scanning files that store data in plain-text.
automation blackhat bounty bugbounty bughunting cli cloud cloud-security cybersecurity infosec infosectools osint pentesting recon reconnaissance s3 secret-scanning
Language:Go 343
vectra-ai-research / MAAD-AF
MAAD Attack Framework - An attack tool for simple, fast & effective security testing of M365 & Entra ID (Azure AD).
adversary-emulation azuread cloud-administration cloud-security entra-id identity-access-management microsoft microsoft-azure-security microsoft-graph microsoft365 mitre powershell red-team security security-testing ttp
Language:PowerShell 335
BishopFox / smogcloud
Find cloud assets that no one wants exposed 🔎 ☁️
security-tools amazonaws cloud-security api-documentation aws attack-surface penetration-testing cloud infosec blueteam security-engineer
Language:Go 326
mazen160 / tfquery
tfquery: Run SQL queries on your Terraform infrastructure. Query resources and analyze its configuration using a SQL-powered framework.
terraform cloud-security aws azure gcp devsecops
Language:Python 326
Aabyss-Team / awsKeyTools
AWS云平台 AccessKey 泄漏利用工具
aws security security-tools accesskeysecret accesskey cloud-native-security cloud-security cloud-security-tools
Language:Python 325
Metarget / awesome-cloud-native-security
awesome resources about cloud native security 🐿
cloud-computing cloud-native cloud-native-security cloud-security container container-escape container-security docker docker-security k8s kubernetes kubernetes-security serverless serverless-security
299
cado-security / cloudgrep
cloudgrep is grep for cloud storage
aws aws-s3 grep search cloud cloud-security aws-security azure azure-security gcp gcp-security
Language:Python 289

cloud-security

wazuh / wazuh

tenable / terrascan

Hack-with-Github / Free-Security-eBooks

madhuakula / kubernetes-goat

Netflix / consoleme

4ndersonLin / awesome-cloud-security

salesforce / cloudsplaining

BishopFox / cloudfox

DataDog / stratus-red-team

teamssix / awesome-cloud-security

Hacking-the-Cloud / hackingthe.cloud

chaitin / veinmind-tools

matanolabs / matano

tmobile / pacbot

SecurityFTW / cs-suite

jassics / awesome-aws-security

bridgecrewio / terragoat

paralus / paralus

common-fate / granted

edgelesssys / constellation

jonrau1 / ElectricEye

cyberark / SkyArk

Zeyad-Azima / Offensive-Resources

0xsha / CloudBrute

aquasecurity / cloud-security-remediation-guides

Funkmyster / awesome-cloud-security

Esonhugh / Attack_Code

HXSecurity / TerraformGoat

stackql / stackql

redhuntlabs / BucketLoot

vectra-ai-research / MAAD-AF

BishopFox / smogcloud

mazen160 / tfquery

Aabyss-Team / awsKeyTools

Metarget / awesome-cloud-native-security

cado-security / cloudgrep