diokhancze Goto Github PK

actionhero

altdns

Generates permutations, alterations and mutations of subdomains and then resolves them

aws-cli

Universal Command Line Interface for Amazon Web Services

aws-view-perl

Easy command line access to Amazon EC2, S3, SQS, ELB, and SDB

axiom

The dynamic infrastructure framework for anybody! Distribute the workload of many different tools with ease, including nmap, ffuf, masscan, nuclei and many more!

azuresentinelkqlscripts

Various tools used to monitor and troubleshoot Azure Sentinel data

checkov

Prevent cloud misconfigurations during build-time for Terraform, Cloudformation, Kubernetes, Serverless framework and other infrastructure-as-code-languages with Checkov by Bridgecrew.

cloud-security-remediation-guides

Security Remediation Guides

cloud_enum

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

cloudsecurity

Diokhan's Cloud Security tools collection.

cloudsploit

Cloud Security Posture Management (CSPM)

docker-bench

Checks whether Docker is deployed according to security best practices as defined in the CIS Docker Benchmark

dockle

Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start

exportawsusers

Python tool to export AWS IAM Users on the account. It will also get creation dates, last login dates, and any API keys associated with the account.

kube-bench

Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark

kubernetes-examples

Minimal self-contained examples of standard Kubernetes features and patterns in YAML

kubiscan

A tool to scan Kubernetes cluster for risky permissions

microburst

A collection of scripts for assessing Microsoft Azure security

my-arsenal-of-aws-security-tools

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

oscp-survival-guide

Kali Linux Offensive Security Certified Professional Survival Exam Guide

overlord

Overlord - Red Teaming Infrastructure Automation

pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

policy_sentry

IAM Least Privilege Policy Generator

powerzure

PowerShell framework to assess Azure security

prowler

Prowler is a security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains all CIS controls listed here https://d0.awsstatic.com/whitepapers/compliance/AWS_CIS_Foundations_Benchmark.pdf and more than 100 additional checks that help on GDPR, HIPAA and other security requirements.

roadtools

The Azure AD exploration framework.

s3scanner

Scan for open AWS S3 buckets and dump the contents

scoutsuite

Multi-Cloud Security Auditing Tool

spiderfoot

SpiderFoot automates OSINT collection so that you can focus on analysis.