cloudsecurity

There are 16 repositories under cloudsecurity topic.

ThreatMapper
deepfence / ThreatMapper
Open source cloud native security observability platform. Linux, K8s, AWS Fargate and more.
cloud-native cloudsecurity cnapp compliance containers cspm cwpp devops devsecops hacktoberfest kubernetes observability registry-scanning scanning-tool secops security-tools threat-analysis vulnerability-detection vulnerability-management vulnerability-scanners
Language:TypeScript 4640
terrascan
tenable / terrascan
Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.
architecture aws aws-security azure-security cloud-security cloudsecurity devops devsecops gcp-security iac infrastructure infrastructure-as-code kubernetes sast scans security security-tools security-violations terraform terrascan
Language:Go 4522
kubernetes-goat
madhuakula / kubernetes-goat
Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀
blueteam cloud-native cloud-security cloudsecurity container container-security devsecops docker hacking infrastructure k8s kubernetes kubernetes-goat kubernetes-security owasp pentesting redteam security vulnerable-app
Language:HTML 3886
salesforce / policy_sentry
IAM Least Privilege Policy Generator
aws aws-security cloud cloudsecurity hacktoberfest iam iam-policy salesforce security
Language:Python 1941
teamssix / awesome-cloud-security
awesome cloud security 收集一些国内外不错的云安全资源，该项目主要面向国内的安全人员
awesome awesome-cloud-security cloud-native cloud-security cloudnative cloudsecurity cybersecurity docker kubernetes tools
1589
nccgroup / PMapper
A tool for quickly evaluating IAM permissions in AWS.
aws botocore cloudsecurity iam python
Language:Python 1327
ahmedtariq01 / Cloud-DevOps-Learning-Resources
This repo includes Books and imp notes related to GCP, Azure, AWS, Docker, K8s, and DevOps. More, exam and interview prep notes.
ansible aws azure devops gcp jenkins docker kubernetes notes azure-devops terraform devops-tools linux multicloud cloudcomputing cloudsecurity cicd devsecops containers cloudnative
1274
teamssix / twiki
T Wiki 云安全知识文库，可能是国内首个云安全知识文库？
blog cloud cloudnative cloudsecurity security wiki
Language:Dockerfile 839
projectdiscovery / cloudlist
Cloudlist is a tool for listing Assets from multiple Cloud Providers.
devops asset-management cloudsecurity security hacktoberfest cli
Language:Go 800
bridgecrewio / yor
Extensible auto-tagger for your IaC files. The ultimate way to link entities in the cloud back to the codified resource which created it.
cloud cloudformation cloudsecurity devops hacktoberfest iac infrastructure-as-code serverless tagging terraform
Language:Go 778
Zeus-Labs / ZeusCloud
Open Source Cloud Security
aws blueteam bugbounty ciem cis cloud cloudsecurity cnapp cspm cwpp devsecops pentesting security security-tools cybersecurity infosec
Language:TypeScript 668
beelzebub
mariocandela / beelzebub
A secure low code honeypot framework, leveraging AI for System Virtualization.
cybersecurity research security honeypot framework low-code go golang research-project whitehat kubernetes cloudnative cloudsecurity openai
Language:Go 576
Esonhugh / Attack_Code
文章 Attack Code 的详细全文。安全和开发总是具有伴生属性，尤其是云的安全方向，本篇文章是希望能帮助到读者的云安全入门材料。Full text of the article Attack Code. Security and development always have concomitant attributes, and this is especially true with the security direction of the cloud. This article is an introduction to cloud security that I hope will help readers.
article cloud cloud-security cloudsecurity introduction security
Language:Shell 529
HXSecurity / TerraformGoat
TerraformGoat is HXSecurity research lab's "Vulnerable by Design" multi cloud deployment tool.
security terraform gcp cloudsecurity aws-security azure-security gcp-security kubernetes-security cloud-security
Language:HCL 503
dowjones / hammer
Dow Jones Hammer : Protect the cloud with the power of the cloud(AWS)
devsecops cloudsecurity aws aws-security
Language:Python 430
Vajra
TROUBLE-1 / Vajra
Vajra is a UI-based tool with multiple techniques for attacking and enumerating in the target's Azure and AWS environment. It features an intuitive web-based user interface built with the Python Flask module for a better user experience. The primary focus of this tool is to have different attacking techniques all at one place with web UI interfaces.
azure azuread aws gcp cloudsecurity redteam-tools toolkit python3
Language:CSS 353
wgpsec / lc
LC（List Cloud）是一个多云攻击面资产梳理工具
cloud cloudsecurity cybersecurity
Language:Go 315
eshlomo1 / Microsoft-Sentinel-SecOps
Microsoft Sentinel SOC Operations
azure-sentinel security secops siem soc azure hunting ir incident-response microsoft microsoft-sentinel threat-hunting threat-intelligence cloudsecurity
Language:PowerShell 230
magpie
openraven / magpie
A Cloud Security Posture Manager or CSPM with a focus on security analysis for the modern cloud stack and a focus on the emerging threat landscape such as cloud ransomware and supply chain attacks.
security-tools aws cloud cspm gcp security-audit security security-vulnerability security-scanner security-testing cloudsecurity
Language:Java 159
rpCheckup
goldfiglabs / rpCheckup
rpCheckup is an AWS resource policy security checkup tool that identifies public, external account access, intra-org account access, and private resources.
aws infosec ec2 s3 resourcepolicy cloudsecurity aws-security cspm
Language:Go 157
nuvola
primait / nuvola
aws cloud cloudsecurity devops devsecops golang neo4j redteaming
Language:Go 134
prancer-io / cloud-validation-framework
prancer platform is an IaC Security engine + Continuous Compliance for your cloud (Azure, AWS, GCP) and Kubernetes environment
cloud governance iac security cloudsecurity sca
Language:Python 122
riskprofiler / CloudFrontier
Monitor the internet attack surface of various public cloud environments. Currently supports AWS, GCP, Azure, DigitalOcean and Oracle Cloud.
api-gateway aws aws-security azure azure-security cloud-security cloudsecurity cyber-security cybersecurity digitalocean dynamodb gcp gcp-security lambda-functions oracle serverless serverless-framework shadow-risk shadowrisk
Language:Lua 116
bridgecrewio / cfngoat
Cfngoat is Bridgecrew's "Vulnerable by Design" Cloudformation repository. Cfngoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.
aws-security cloudformation cloudsecurity devsecops
90
GATOR
anrbn / GATOR
GATOR - GCP Attack Toolkit for Offensive Research, a tool designed to aid in research and exploiting Google Cloud Environments
cloudsecurity gcp offensive-security redteam-tools gcpsecurity
Language:Python 87
vectra-ai-research / derf
DeRF (Detection Replay Framework) is an "Attacks As A Service" framework, allowing the emulation of offensive techniques and generation of repeatable detection samples in the cloud. Built on Google Workflows
attack-defense aws cloudsecurity gcp security clouddetection cloud google google-workflow
Language:HCL 74
CloudDefenseAI / falco_extended_rules
Curating Falco rules with MITRE ATT&CK Matrix
cloudsecurity devops devsecops kuberentes security cnapp cspm security-tools threat-analysis vulnerability-detection vulnerability-scanners falco malware threat threat-modeling container-security kubernetes-security malware-analysis workload-security zero-day
Language:Python 70
m14r41 / PentestingEverything
Web | Mobile | API | Thick Client | Source Code Review | Wireless | Network Pentesting etc...
api-pentest application-security networksecurity pentesting hacking information-security blockchain cloudsecurity firewall forensics osint pentesting-resources phishing thickclient websecurity ci-cd-security
Language:JavaScript 68
introspector
goldfiglabs / introspector
A schema and set of tools for using SQL to query cloud infrastructure.
aws sql database-schema security-groups iam postgres infrastructure-as-deployed secops security-tools compliance-as-code compliance-automation cloud-infrastructure cloud-security cspm cloudsecurity aws-security infosec devsecops security cmdb
Language:Python 66
cfsec
aquasecurity / cfsec
Static analysis for CloudFormation templates to identify common misconfiguration
cloudformation static-analysis go aws cloudsecurity golang hacktoberfest aws-sam aws-sam-cli aws-cloudformation
Language:Go 58
ansorren / GDPatrol
A Lambda-powered Security Orchestration framework for AWS GuardDuty
aws aws-lambda cloud cloudsecurity aws-security aws-guardduty soar incident-response cybersecurity threatintel siem blueteam
Language:Python 51
cloudsec-tidbits
doyensec / cloudsec-tidbits
Blogpost series showcasing interesting cloud - web app security bugs
aws cloudsecurity terraform
Language:HCL 44
stafordtituss / HazProne
HazProne is a Cloud Pentesting Framework that emulates close to Real-World Scenarios by deploying Vulnerable-By-Demand AWS resources enabling you to pentest Vulnerabilities within, and hence, gain a better understanding of what could go wrong and why!!
aws-security cloud-security cloudsecurity hazprone terraform cybersecurity cybersecurity-incidents cybersecurity-education
Language:HCL 38
lightspin-tech / lightspin-2022-top-7-attack-paths
Based on Lightspin proprietary data, research, and our tracking of cloud security trends in the market, our research team has compiled a list of the 2022 Top 7 Cloud Attack Paths across AWS, Azure, GCP, and Kubernetes as seen on the Lightspin Cloud Native Application Protection Platform.
attack-paths attack-surface aws-security awssecurity azure-security azuresecurity cloud-security cloudsecurity gcp-security mitre-attack ttps
37
irgoncalves / awesome-security-articles
This repository contains links to awesome security articles.
appsec cloudsecurity cybersecurity windows
35
salesforce / terraform-provider-policyguru
Terraform provider for Policy Sentry (IAM least privilege generator and auditor)
aws iam cloud security cloudsecurity aws-security salesforce hacktoberfest
Language:Go 29

cloudsecurity

deepfence / ThreatMapper

tenable / terrascan

madhuakula / kubernetes-goat

salesforce / policy_sentry

teamssix / awesome-cloud-security

nccgroup / PMapper

ahmedtariq01 / Cloud-DevOps-Learning-Resources

teamssix / twiki

projectdiscovery / cloudlist

bridgecrewio / yor

Zeus-Labs / ZeusCloud

mariocandela / beelzebub

Esonhugh / Attack_Code

HXSecurity / TerraformGoat

dowjones / hammer

TROUBLE-1 / Vajra

wgpsec / lc

eshlomo1 / Microsoft-Sentinel-SecOps

openraven / magpie

goldfiglabs / rpCheckup

primait / nuvola

prancer-io / cloud-validation-framework

riskprofiler / CloudFrontier

bridgecrewio / cfngoat

anrbn / GATOR

vectra-ai-research / derf

CloudDefenseAI / falco_extended_rules

m14r41 / PentestingEverything

goldfiglabs / introspector

aquasecurity / cfsec

ansorren / GDPatrol

doyensec / cloudsec-tidbits

stafordtituss / HazProne

lightspin-tech / lightspin-2022-top-7-attack-paths

irgoncalves / awesome-security-articles

salesforce / terraform-provider-policyguru