houey Goto Github PK

certonid

Certonid is a Serverless SSH Certificate Authority

cheesetools

Self-developed tools for Lateral Movement/Code Execution

cinema-hall

cloud-middleware-dataset

cloud-sniper

Cloud Security Operations Orchestrator

cloud_metadata_extractor

Cloud metadata extraction tools and scripts

cloudfrunt

A tool for identifying misconfigured CloudFront domains

cloudtracker

CloudTracker helps you find over-privileged IAM users and roles by comparing CloudTrail logs with current IAM policies.

commonspeak2

Leverages publicly available datasets from Google BigQuery to generate content discovery and subdomain wordlists

commonspeak2-wordlists

Wordlists that have been compiled using Commonspeak2. This repo is updated every time new wordlists are generated.

consoleme

ConsoleMe consolidates the management of multiple AWS accounts into a single interface. It allows your end-users and administrators to get credentials for your different accounts, and allows your users/administrators to manage or request cloud permissions.

container-security-checklist

Checklist for container security - devsecops practices

cookiemonster

🍪 CookieMonster helps you detect and abuse vulnerable implementations of stateless sessions.

cosign

Container Signing

credking

Password spraying using AWS Lambda for IP rotation

credsniper

CredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens.

crlfsuite

The most powerful CRLF injection (HTTP Response Splitting) scanner.

ctfr

Abusing Certificate Transparency logs for getting HTTPS websites subdomains.

data-perimeter-policy-examples

Example policies demonstrating how to implement a data perimeter on AWS.

diamorphine

LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x (x86/x86_64 and ARM64)

diffy

Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.

dispatch

All of the ad-hoc things you're doing to manage incidents today, done for you, and much more!

dnsstager

Hide your payload in DNS

docker-osx

Mac in Docker! Run near native OSX-KVM in Docker! X11 Forwarding!

domain-protect

Protect against subdomain takeover

dref

DNS Rebinding Exploitation Framework

driftwood

Private key usage verification

dvca

Damn Vulnerable Cloud Application

dwatch

fork and stripped down versioon of a now defunct DomainWatch script from ebelties

easypki

Creating a certificate authority the easy way