amazon-api-gateway-url-shortener

Creates a serverless URL shortener on AWS without using AWS Lambda or any other compute.

antiope

AWS Inventory and Compliance Framework

antiope-aws-module

Python classes for leveraging Antiope

antiope-azure

Azure Inventory Plugin for Antiope

antiope-cloudsploit

Integration of Antiope & CloudSploit for CSPM

antiope-hunt-scripts

Scripts to hunt for issues in your Antiope ES Cluster

antiope-local

Sample Antiope Local Repo

antiope-scorecards

Cloud Security Scorecard module to Antiope

artemis

Artemis source code scanner

aws-flamethrower-scripts

Simple scripts to burn down unused infrastructure in your account

aws-guardduty-enterprise

Manage GuardDuty At Enterprise Scale

aws-interesting-api-calls

Inventory of AWS API Calls of Significance to Security

aws-lambda-keyframe-extract

Extract Image files from a video file via AWS Lambda

aws-requiremfa

Automation to deny access to new IAM users till MFA is configured

aws-security-survival-kit

Bare minimum AWS Security Alerting

aws-sso-steampipe-tool

Generate AWS CLI Profiles from AWS SSO & Steampipe (AWS) Connections Quickly

aws-stupid-shit

Random Scratch scripts and templates no one should ever use

aws_enum_scripts

Scripts to download AWS config

aws_scripts

Useful scripts for maintaining multiple AWS Accounts

azure-scripts

Random Azure Scripts

cft-deploy

Python module & scripts for managing AWS CloudFormation Stacks

cloudfox

Automating situational awareness for cloud penetration tests.

cloudgoat

Rhino Security Labs' "Vulnerable by Design" AWS infrastructure setup tool

cloudtrail2sightings

Convert cloudtrail data to MITRE ATT&CK Sightings

detect-credential-compromise

Cloudformation Template and Lambda to detect if Instance Profile credentials are being used outside your AWS Account.

domain-protect

Protect against subdomain takeover

dumpsterdiver

Tool to search secrets in various filetypes.

endgame

An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share the resources with the entire internet 😈

fuzz.txt

Potentially dangerous files

jchrisfarris