cloud-security

There are 53 repositories under cloud-security topic.

wazuh / wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
cloud-security compliance configuration-assessement container-security cybersecurity file-integrity-monitoring incident-response infosec log-analysis malware-detection pci-dss security security-audit security-automation security-hardening security-tools siem vulnerability-detection wazuh xdr
Language:C++ 11050
terrascan
tenable / terrascan
Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.
architecture aws aws-security azure-security cloud-security cloudsecurity devops devsecops gcp-security iac infrastructure infrastructure-as-code kubernetes sast scans security security-tools security-violations terraform terrascan
Language:Go 4771
kubernetes-goat
madhuakula / kubernetes-goat
Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀
blueteam cloud-native cloud-security cloudsecurity container container-security devsecops docker hacking infrastructure k8s kubernetes kubernetes-goat kubernetes-security owasp pentesting redteam security vulnerable-app
Language:HTML 4469
Hack-with-Github / Free-Security-eBooks
Free Security and Hacking eBooks
security hacking penetration-testing hacking-ebooks forensics hackers-handbook cloud-security kali-linux cyber-security ebooks
4343
Netflix / consoleme
A Central Control Plane for AWS Permissions and Access
aws aws-iam cloud-security security-tools
Language:Python 3145
4ndersonLin / awesome-cloud-security
🛡️ Awesome Cloud Security Resources ⚔️
aws aws-security azure azure-security cloud-computing cloud-security cybersecurity gcp gcp-security security
2088
salesforce / cloudsplaining
Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.
aws aws-iam aws-security cloud cloud-security hacktoberfest iam salesforce security
Language:JavaScript 2000
cloudfox
BishopFox / cloudfox
Automating situational awareness for cloud penetration tests.
aws cloud cloud-security golang penetration-testing-tools security
Language:Go 1959
DataDog / stratus-red-team
:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud
adversary-emulation aws aws-security azure-security cloud-native-security cloud-security detection-engineering gcp-security kubernetes-security mitre-attack purple-team security threat-detection
Language:Go 1831
teamssix / awesome-cloud-security
awesome cloud security 收集一些国内外不错的云安全资源，该项目主要面向国内的安全人员
awesome awesome-cloud-security cloud-native cloud-security cloudnative cloudsecurity cybersecurity docker kubernetes tools
1786
hackingthe.cloud
Hacking-the-Cloud / hackingthe.cloud
An encyclopedia for offensive and defensive security knowledge in cloud native technologies.
aws aws-hacking azure cloud cloud-security gcp hacking hacking-cloud penetration-testing
Language:Dockerfile 1736
chaitin / veinmind-tools
veinmind-tools 是由长亭科技自研，基于 veinmind-sdk 打造的容器安全工具集
cloud-native cloud-security container-security containerd docker image-security security
Language:Go 1530
matano
matanolabs / matano
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
aws cloud security big-data serverless apache-iceberg log-analytics log-management threat-hunting rust alerting cloud-native aws-security cloud-security cybersecurity secops security-tools dfir detection-engineering siem
Language:Rust 1474
pacbot
tmobile / pacbot
PacBot (Policy as Code Bot)
cloud-security security aws continous-compliance cloud-auditing policy-as-code cloud security-automation aws-security java angularjs cloud-compliance-reporting cloud-native spring-boot
Language:Java 1288
awesome-aws-security
jassics / awesome-aws-security
Curated list of links, references, books videos, tutorials (Free or Paid), Exploit, CTFs, Hacking Practices etc. which are related to AWS Security
awesome awesome-list awesome-lists aws aws-auditing aws-security aws-security-automation aws-security-resources cloud-security security security-tools
1274
bridgecrewio / terragoat
TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.
aws-security azure-security cloud-security devsecops gcp-security goat terraform
Language:HCL 1157
SecurityFTW / cs-suite
Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.
aws-audit aws-security azure azure-audit azure-security cloud-security gcp gcp-audit-report security security-audit security-tools
Language:Shell 1144
common-fate / granted
The easiest way to access your cloud.
aws cloud cloud-security credentials hacktoberfest iam keychain sso
Language:Go 1128
paralus
paralus / paralus
All-in-one Kubernetes access manager. User-level credentials, RBAC, SSO, audit logs.
access-management cloud-security k8s-access-management kubernetes-security zero-trust-security ztka
Language:Go 1043
ElectricEye
jonrau1 / ElectricEye
ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring supporting 100s of services and evaluations to harden your CSP & SaaS environments with controls mapped to over 20 industry, regulatory, and best practice controls frameworks
asset-management attack-surface-management aws aws-audit aws-compliance aws-security cloud-auditing cloud-compliance-reporting cloud-security compliance devsecops gcp-security google-cloud-security multicloud saas-security security-audit security-engineering security-hub security-monitoring security-tools
Language:Python 961
constellation
edgelesssys / constellation
Constellation is the first Confidential Kubernetes. Constellation shields entire Kubernetes clusters from the (cloud) infrastructure using confidential computing.
cloud-security confidential-computing data-encryption kubernetes kubernetes-security
Language:Go 957
Zeyad-Azima / Offensive-Resources
A Huge Learning Resources with Labs For Offensive Security Players
api api-security cloud-security cybersecurity hack hacking infrastructure learning mobile mobile-security offensive offensive-security owasp owasp-top-10 red-team red-teaming redteam security web web-security
913
0xsha / CloudBrute
Awesome cloud enumerator
amazon bugbounty cloud cloud-security cloud-storage digitalocean google hacking infosec linode pentest-tool pentesting redteam s3-bucket vultr
Language:Go 897
cyberark / SkyArk
SkyArk helps to discover, assess and secure the most privileged entities in Azure and AWS
cloud-security powershell security-tools privileges cloud aws admins attacker threat azure
Language:PowerShell 874
aquasecurity / cloud-security-remediation-guides
Security Remediation Guides
aws azure cloud cloud-security
710
Funkmyster / awesome-cloud-security
A curated list of awesome cloud security blogs, podcasts, standards, projects, and examples.
cloud-security aws security information-security waf dlp logging cloud elasticsearch awesome awesome-list aws-security data-loss-prevention security-standards nist google-cloud-security hacktoberfest hacktoberfest2023 oracle-cloud-security hacktoberfestcebu
581
stackql
stackql / stackql
Query, provision and operate Cloud and SaaS resources and APIs using an extensible SQL based framework
asset-management cloud cloud-automation cloud-config cloud-operations cloud-security cspm devops devsecops infrastructure-as-code openapi3 sql stackql hacktoberfest
Language:Go 557
Esonhugh / Attack_Code
文章 Attack Code 的详细全文。安全和开发总是具有伴生属性，尤其是云的安全方向，本篇文章是希望能帮助到读者的云安全入门材料。Full text of the article Attack Code. Security and development always have concomitant attributes, and this is especially true with the security direction of the cloud. This article is an introduction to cloud security that I hope will help readers.
article cloud cloud-security cloudsecurity introduction security
Language:Shell 536
HXSecurity / TerraformGoat
TerraformGoat is HXSecurity research lab's "Vulnerable by Design" multi cloud deployment tool.
security terraform gcp cloudsecurity aws-security azure-security gcp-security kubernetes-security cloud-security
Language:HCL 536
redhuntlabs / BucketLoot
BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as well as Regular Expressions from publicly-exposed storage buckets by scanning files that store data in plain-text.
automation blackhat bounty bugbounty bughunting cli cloud cloud-security cybersecurity infosec infosectools osint pentesting recon reconnaissance s3 secret-scanning
Language:Go 381
vectra-ai-research / MAAD-AF
MAAD Attack Framework - An attack tool for simple, fast & effective security testing of M365 & Entra ID (Azure AD).
adversary-emulation microsoft microsoft-azure-security powershell security cloud-security mitre red-team security-testing azuread cloud-administration microsoft365 identity-access-management microsoft-graph ttp entra-id
Language:PowerShell 359
Aabyss-Team / awsKeyTools
AWS云平台 AccessKey 泄漏利用工具
accesskey accesskeysecret aws cloud-native-security cloud-security cloud-security-tools security security-tools
Language:Python 348
BishopFox / smogcloud
Find cloud assets that no one wants exposed 🔎 ☁️
amazonaws api-documentation attack-surface aws blueteam cloud cloud-security infosec penetration-testing security-engineer security-tools
Language:Go 332
AabyssZG / Docker-TCP-Scan
旨在以攻促防，针对Docker TCP socket的开源利用工具
cloud-security cybersecurity cybersecurity-education docker docker-remote-api rce
Language:Python 331
mazen160 / tfquery
tfquery: Run SQL queries on your Terraform infrastructure. Query resources and analyze its configuration using a SQL-powered framework.
aws azure cloud-security devsecops gcp terraform
Language:Python 323
cado-security / cloudgrep
cloudgrep is grep for cloud storage
aws aws-s3 aws-security azure azure-security cloud cloud-security gcp gcp-security grep search
Language:Python 319

cloud-security

wazuh / wazuh

tenable / terrascan

madhuakula / kubernetes-goat

Hack-with-Github / Free-Security-eBooks

Netflix / consoleme

4ndersonLin / awesome-cloud-security

salesforce / cloudsplaining

BishopFox / cloudfox

DataDog / stratus-red-team

teamssix / awesome-cloud-security

Hacking-the-Cloud / hackingthe.cloud

chaitin / veinmind-tools

matanolabs / matano

tmobile / pacbot

jassics / awesome-aws-security

bridgecrewio / terragoat

SecurityFTW / cs-suite

common-fate / granted

paralus / paralus

jonrau1 / ElectricEye

edgelesssys / constellation

Zeyad-Azima / Offensive-Resources

0xsha / CloudBrute

cyberark / SkyArk

aquasecurity / cloud-security-remediation-guides

Funkmyster / awesome-cloud-security

stackql / stackql

Esonhugh / Attack_Code

HXSecurity / TerraformGoat

redhuntlabs / BucketLoot

vectra-ai-research / MAAD-AF

Aabyss-Team / awsKeyTools

BishopFox / smogcloud

AabyssZG / Docker-TCP-Scan

mazen160 / tfquery

cado-security / cloudgrep