houey Goto Github PK

opa

An open source, general-purpose policy engine.

opencti

Open Cyber Threat Intelligence Platform

openedr

Open EDR public repository

org-formation-cli

Better than landingzones!

pacbot

PacBot (Policy as Code Bot)

pacu

Rhino Security Labs' AWS penetration testing toolkit

patrolaroid

A production-friendly malware scanner for your AWS cloud

peass-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

pmapper

A tool for quickly evaluating IAM permissions in AWS.

pocs

Proof of Concepts (PE, PDF...)

policy-templates

postmessage-tracker

A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon

procrustes

A bash script that automates the exfiltration of data over dns in case we have a blind command execution on a server where all outbound connections except DNS are blocked.

prowler

AWS Security Best Practices Assessment, Auditing, Hardening and Forensics Readiness Tool. It follows guidelines of the CIS Amazon Web Services Foundations Benchmark and additional checks. Official CIS for AWS guide: https://d0.awsstatic.com/whitepapers/compliance/AWS_CIS_Foundations_Benchmark.pdf

quiet-riot

AWS Enumeration and Footprinting Tool

regula

Regula checks Terraform for AWS, Azure and GCP security and CIS compliance using Open Policy Agent/Rego

resoto

Resoto creates an inventory of your cloud, provides deep visibility, and reacts to changes in your infrastructure. ⚡️

rlinklayer

Richard Linklayer: experimental TCP/IP over Amazon Cloudwatch Logs (and tags)

s3enum

Fast and stealthy Amazon S3 bucket enumeration tool for pentesters.

safer-signed-urls

S3-signed URLs that aren't easily misplaced

sceptre

Build better AWS infrastructure

scour

scout2

Security auditing tool for AWS environments

scpkit

SCP management tool

screenity

The most powerful screen recorder & annotation tool for Chrome 🎥

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

security-bucket-brigade

security-interview-questions

Security interview questions with possible explanation for roles in AppSec, Pentesting, Cloud Security, DevSecOps, Network Security and so on

security-research

Exploits written by the Rhino Security Labs team

skywrapper

SkyWrapper helps to discover suspicious creation forms and uses of temporary tokens in AWS