houey Goto Github PK

dwatch

fork and stripped down versioon of a now defunct DomainWatch script from ebelties

easypki

Creating a certificate authority the easy way

electriceye

Continuously monitor your AWS services for configurations that can lead to degradation of confidentiality, integrity or availability. All results will be sent to Security Hub for further aggregation and analysis.

endgame

An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share the resources with the entire internet 😈

external_c2_framework

Python api for usage with cobalt strike's External C2 specification

finalrecon

The Last Web Recon Tool You'll Need

findmytakeover

find dangling domains in a multi cloud environment

fireprox

AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation

flowdog

Framework for inspecting and editing traffic in AWS VPCs

forgedpillow

A tool to modify timestamps in a packet capture to a user selected date

former2

Generate CloudFormation / Terraform / Troposphere templates from your existing AWS resources.

g-scout

Google Cloud Platform Security Tool

gcpbucketbrute

A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.

gfyp

Unification of dnstwist + SQLite + Email reporting. Set it as a cron job that runs every hour, give it a list of domains and email addresses for reporting, then watch it go find stuff.

gitgraber

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...

gitloss

A tool for hunting Github for keywords, ideal for detecting internal code leaking to public Github

gitoops

all paths lead to clouds

gowitness

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

gron

Make JSON greppable!

gsec

Web Security Scanner

hackingthe.cloud

Content for hackingthe.cloud

halogen

Automatically create YARA rules from malicious documents.

hamispa

Notes for High Availability MISP in AWS

hammer

Dow Jones Hammer : Protect the cloud with the power of the cloud(AWS)

harness-core

iam-policy-scanner

Scans IAM Policies and Roles for Possible Security Issues

iamactionhunter

iamfinder

IAMFinder enumerates and finds users and IAM roles in a target AWS account.

iamlive

Generate an IAM policy from AWS calls using client-side monitoring (CSM) or embedded proxy

iamzero

Identity & Access Management simplified and secure.