A tool to find a company (target) infrastructure, files, and apps on the top cloud providers (Amazon, Google, Microsoft, DigitalOcean, …
BucketLoot – An Automated S3-compatible Bucket Inspector
BucketLoot is an automated S3-compatible Bucket inspector that can help users extract assets, flag secret exposures and even search for …
Matano – The Open-Source Security Lake Platform For AWS
Matano is an open source security lake platform for AWS. It lets you ingest petabytes of security and log data …
Cloudfox – Automating Situational Awareness For Cloud Penetration Tests
CloudFox helps you gain situational awareness in unfamiliar cloud environments. It’s an open source command line tool created to help …
TerraformGoat – “Vulnerable By Design” Multi Cloud Deployment Tool
TerraformGoat is selefra research lab’s “Vulnerable by Design” multi cloud deployment tool. Currently supported cloud vendors include Alibaba Cloud, Tencent …
Kubernetes-Goat – Is A “Vulnerable By Design” Kubernetes Cluster. Designed To Be An Intentionally Vulnerable Cluster Environment To Learn And Practice Kubernetes Security
The Kubernetes Goat is designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security. Refer to …
Smogcloud – Find Cloud Assets That No One Wants Exposed
Find exposed AWS cloud assets that you did not know you had. A comprehensive asset inventory is step one to …
SkyArk – Helps To Discover, Assess And Secure The Most Privileged Entities In Azure And AWS
SkyArk is a cloud security project with two main scanning modules: AzureStealth – Scans Azure environments AWStealth – Scan AWS …
Cloud Security Mistakes Which Everyone Should Avoid
In July 2019, Capital One Financial Corporation became the victim of a massive data breach that affected more than 100 …