z0ph

cfn-lint

CloudFormation Linter

learn-cantrill-io-labs

Standard and Advanced Demos for learn.cantrill.io courses

k9-cli

Analyze effective AWS IAM access from the command-line using k9.

trufflehog

Find, verify, and analyze leaked credentials

Maccy

Lightweight clipboard manager for macOS

cfntagger

Mass tag resources in Cloudformation templates

panther-analysis

Built-in Panther detection rules and policies

cli

🥧 HTTPie CLI — modern, user-friendly command-line HTTP client for the API era. JSON support, colors, sessions, downloads, plugins & more.

twitter-advanced-search

Advanced Search for Twitter.

assume-role-oidc-client-credentials

An AWS credential provider for using OIDC client_credentials flow to AWS STS

ikea-availability-checker

Command-Line-Script & Library for checking the availability of specific IKEA products in specific stores and/or countries.

jwt-rsa-aws-custom-authorizer

An AWS Custom Authorizer for AWS Gateway that support Auth0 Bearer tokens.

aws-cloudsaga

AWS CloudSaga - Simulate security events in AWS

censys-subdomain-finder

⚡ Perform subdomain enumeration using the certificate transparency logs from Censys.

remediate-AWS-IMDSv1

Simple tool to identify and remediate the use of the AWS EC2 IMDSv1.

imdsv2_wall_of_shame

List of vendors that do not allow IMDSv2 enforcement

moto

A library that allows you to easily mock out tests based on AWS infrastructure.

aws-customer-security-incidents

A repository of breaches of AWS customers

madr

Markdown Architectural Decision Records

amazon-guardduty-tester

This repository can be used to generate and evaluate findings detected by Amazon GuardDuty

stratus-red-team

:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud

SneakyEndpoints

Hide from the InstanceCredentialExfiltration GuardDuty finding by using VPC Endpoints

tna-custodian

DevSecOps

Ultimate DevSecOps library

awesome-api-security

A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.

PolicyGlass

PolicyGlass allows you to analyse one or more AWS policies' effective permissions in aggregate, by restating them in the form of PolicyShards which are always Allow, never Deny.

hey

HTTP load generator, ApacheBench (ab) replacement

finala

Finala is an open-source resource cloud scanner that analyzes, discloses, presents and notifies about wasteful and unused resources.

Logout4Shell

Use Log4Shell vulnerability to vaccinate a victim server against Log4Shell

log4shell-vulnerable-app

Spring Boot web application vulnerable to Log4Shell (CVE-2021-44228).