cloud-security

There are 53 repositories under cloud-security topic.

wazuh / wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
cloud-security compliance configuration-assessement container-security cybersecurity file-integrity-monitoring incident-response infosec log-analysis malware-detection pci-dss security security-audit security-automation security-hardening security-tools siem vulnerability-detection wazuh xdr
Language:C++ 11297
terrascan
tenable / terrascan
Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.
architecture aws aws-security azure-security cloud-security cloudsecurity devops devsecops gcp-security iac infrastructure infrastructure-as-code kubernetes sast scans security security-tools security-violations terraform terrascan
Language:Go 4786
kubernetes-goat
madhuakula / kubernetes-goat
Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀
kubernetes vulnerable-app security hacking pentesting infrastructure cloud-security docker container kubernetes-goat devsecops cloudsecurity kubernetes-security container-security owasp cloud-native k8s blueteam redteam
Language:HTML 4554
Hack-with-Github / Free-Security-eBooks
Free Security and Hacking eBooks
cloud-security cyber-security ebooks forensics hackers-handbook hacking hacking-ebooks kali-linux penetration-testing security
4369
Netflix / consoleme
A Central Control Plane for AWS Permissions and Access
aws-iam aws security-tools cloud-security
Language:Python 3156
4ndersonLin / awesome-cloud-security
🛡️ Awesome Cloud Security Resources ⚔️
aws aws-security azure azure-security cloud-computing cloud-security cybersecurity gcp gcp-security security
2102
salesforce / cloudsplaining
Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.
aws aws-iam aws-security cloud cloud-security hacktoberfest iam salesforce security
Language:JavaScript 2013
cloudfox
BishopFox / cloudfox
Automating situational awareness for cloud penetration tests.
aws cloud cloud-security golang penetration-testing-tools security
Language:Go 1988
DataDog / stratus-red-team
:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud
adversary-emulation aws aws-security azure-security cloud-native-security cloud-security detection-engineering gcp-security kubernetes-security mitre-attack purple-team security threat-detection
Language:Go 1870
teamssix / awesome-cloud-security
awesome cloud security 收集一些国内外不错的云安全资源，该项目主要面向国内的安全人员
awesome awesome-cloud-security cloud-native cloud-security cloudnative cloudsecurity cybersecurity docker kubernetes tools
1824
hackingthe.cloud
Hacking-the-Cloud / hackingthe.cloud
An encyclopedia for offensive and defensive security knowledge in cloud native technologies.
aws aws-hacking azure cloud cloud-security gcp hacking hacking-cloud penetration-testing
Language:Dockerfile 1768
chaitin / veinmind-tools
veinmind-tools 是由长亭科技自研，基于 veinmind-sdk 打造的容器安全工具集
cloud-native cloud-security container-security containerd docker image-security security
Language:Go 1543
matano
matanolabs / matano
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
alerting apache-iceberg aws aws-security big-data cloud cloud-native cloud-security cybersecurity detection-engineering dfir log-analytics log-management rust secops security security-tools serverless siem threat-hunting
Language:Rust 1489
awesome-aws-security
jassics / awesome-aws-security
Curated list of links, references, books videos, tutorials (Free or Paid), Exploit, CTFs, Hacking Practices etc. which are related to AWS Security
awesome awesome-list awesome-lists aws aws-auditing aws-security aws-security-automation aws-security-resources cloud-security security security-tools
1290
pacbot
tmobile / pacbot
PacBot (Policy as Code Bot)
cloud-security security aws continous-compliance cloud-auditing policy-as-code cloud security-automation aws-security java angularjs cloud-compliance-reporting cloud-native spring-boot
Language:Java 1289
common-fate / granted
The easiest way to access your cloud.
aws cloud cloud-security credentials hacktoberfest iam keychain sso
Language:Go 1174
bridgecrewio / terragoat
TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.
aws-security azure-security cloud-security devsecops gcp-security goat terraform
Language:HCL 1169
SecurityFTW / cs-suite
Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.
aws-audit aws-security azure azure-audit azure-security cloud-security gcp gcp-audit-report security security-audit security-tools
Language:Shell 1145
paralus
paralus / paralus
All-in-one Kubernetes access manager. User-level credentials, RBAC, SSO, audit logs.
access-management cloud-security k8s-access-management kubernetes-security zero-trust-security ztka
Language:Go 1052
constellation
edgelesssys / constellation
Constellation is the first Confidential Kubernetes. Constellation shields entire Kubernetes clusters from the (cloud) infrastructure using confidential computing.
cloud-security confidential-computing data-encryption kubernetes kubernetes-security
Language:Go 971
ElectricEye
jonrau1 / ElectricEye
ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring supporting 100s of services and evaluations to harden your CSP & SaaS environments with controls mapped to over 20 industry, regulatory, and best practice controls frameworks
security-tools security-audit cloud-security security-monitoring aws-security security-hub cloud-compliance-reporting cloud-auditing security-engineering devsecops aws-audit aws-compliance compliance attack-surface-management aws gcp-security multicloud saas-security google-cloud-security asset-management
Language:Python 966
0xsha / CloudBrute
Awesome cloud enumerator
amazon bugbounty cloud cloud-security cloud-storage digitalocean google hacking infosec linode pentest-tool pentesting redteam s3-bucket vultr
Language:Go 927
Zeyad-Azima / Offensive-Resources
A Huge Learning Resources with Labs For Offensive Security Players
api api-security cloud-security cybersecurity hack hacking infrastructure learning mobile mobile-security offensive offensive-security owasp owasp-top-10 red-team red-teaming redteam security web web-security
922
cyberark / SkyArk
SkyArk helps to discover, assess and secure the most privileged entities in Azure and AWS
admins attacker aws azure cloud cloud-security powershell privileges security-tools threat
Language:PowerShell 876
aquasecurity / cloud-security-remediation-guides
Security Remediation Guides
cloud cloud-security aws azure
711
stackql
stackql / stackql
Query, provision and operate Cloud and SaaS resources and APIs using an extensible SQL based framework
asset-management cloud cloud-automation cloud-config cloud-operations cloud-security cspm devops devsecops infrastructure-as-code openapi3 sql stackql hacktoberfest
Language:Go 638
Funkmyster / awesome-cloud-security
A curated list of awesome cloud security blogs, podcasts, standards, projects, and examples.
awesome awesome-list aws aws-security cloud cloud-security data-loss-prevention dlp elasticsearch google-cloud-security hacktoberfest hacktoberfest2023 hacktoberfestcebu information-security logging nist oracle-cloud-security security security-standards waf
586
HXSecurity / TerraformGoat
TerraformGoat is HXSecurity research lab's "Vulnerable by Design" multi cloud deployment tool.
aws-security azure-security cloud-security cloudsecurity gcp gcp-security kubernetes-security security terraform
Language:HCL 545
Esonhugh / Attack_Code
文章 Attack Code 的详细全文。安全和开发总是具有伴生属性，尤其是云的安全方向，本篇文章是希望能帮助到读者的云安全入门材料。Full text of the article Attack Code. Security and development always have concomitant attributes, and this is especially true with the security direction of the cloud. This article is an introduction to cloud security that I hope will help readers.
article cloud cloud-security cloudsecurity introduction security
Language:Shell 539
redhuntlabs / BucketLoot
BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as well as Regular Expressions from publicly-exposed storage buckets by scanning files that store data in plain-text.
automation blackhat bounty bugbounty bughunting cli cloud cloud-security cybersecurity infosec infosectools osint pentesting recon reconnaissance s3 secret-scanning
Language:Go 387
Aabyss-Team / awsKeyTools
AWS云平台 AccessKey 泄漏利用工具
accesskey accesskeysecret aws cloud-native-security cloud-security cloud-security-tools security security-tools
Language:Python 376
vectra-ai-research / MAAD-AF
MAAD Attack Framework - An attack tool for simple, fast & effective security testing of M365 & Entra ID (Azure AD).
adversary-emulation microsoft microsoft-azure-security powershell security cloud-security mitre red-team security-testing azuread cloud-administration microsoft365 identity-access-management microsoft-graph ttp entra-id
Language:PowerShell 363
AabyssZG / Docker-TCP-Scan
旨在以攻促防，针对Docker TCP socket的开源利用工具
cloud-security cybersecurity cybersecurity-education docker docker-remote-api rce
Language:Python 334
BishopFox / smogcloud
Find cloud assets that no one wants exposed 🔎 ☁️
security-tools amazonaws cloud-security api-documentation aws attack-surface penetration-testing cloud infosec blueteam security-engineer
Language:Go 332
mazen160 / tfquery
tfquery: Run SQL queries on your Terraform infrastructure. Query resources and analyze its configuration using a SQL-powered framework.
aws azure cloud-security devsecops gcp terraform
Language:Python 322
cado-security / cloudgrep
cloudgrep is grep for cloud storage
aws aws-s3 aws-security azure azure-security cloud cloud-security gcp gcp-security grep search
Language:Python 319

cloud-security

wazuh / wazuh

tenable / terrascan

madhuakula / kubernetes-goat

Hack-with-Github / Free-Security-eBooks

Netflix / consoleme

4ndersonLin / awesome-cloud-security

salesforce / cloudsplaining

BishopFox / cloudfox

DataDog / stratus-red-team

teamssix / awesome-cloud-security

Hacking-the-Cloud / hackingthe.cloud

chaitin / veinmind-tools

matanolabs / matano

jassics / awesome-aws-security

tmobile / pacbot

common-fate / granted

bridgecrewio / terragoat

SecurityFTW / cs-suite

paralus / paralus

edgelesssys / constellation

jonrau1 / ElectricEye

0xsha / CloudBrute

Zeyad-Azima / Offensive-Resources

cyberark / SkyArk

aquasecurity / cloud-security-remediation-guides

stackql / stackql

Funkmyster / awesome-cloud-security

HXSecurity / TerraformGoat

Esonhugh / Attack_Code

redhuntlabs / BucketLoot

Aabyss-Team / awsKeyTools

vectra-ai-research / MAAD-AF

AabyssZG / Docker-TCP-Scan

BishopFox / smogcloud

mazen160 / tfquery

cado-security / cloudgrep