#
cloudsecurity
Here are 57 public repositories matching this topic...
Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀
docker
kubernetes
infrastructure
security
microservices
helm
container
hacking
owasp
cloud-native
pentesting
cloudsecurity
devsecops
cloud-security
container-security
vulnerable-app
kubernetes-security
kubernetes-goat
-
Updated
Jul 13, 2022 - HTML
serverless
secops
cloud-native
security-vulnerability
vulnerability-detection
vulnerability-management
observability
vulnerability-scanners
vulnerability-assessment
log4j2
threat-analysis
security-tools
cloudsecurity
devsecops
vulnerability-scanning
scanning-tool
registry-scanning
cwpp
-
Updated
Jul 15, 2022 - JavaScript
IAM Least Privilege Policy Generator
-
Updated
Jul 1, 2022 - Python
A tool for quickly evaluating IAM permissions in AWS.
-
Updated
Apr 12, 2022 - Python
This repo includes Books and imp notes related to GCP, Azure, AWS, Docker, K8s, and DevOps. More, exam and interview prep notes.
linux
docker
kubernetes
jenkins
aws
ansible
devops
books
notes
azure
terraform
gcp
cicd
devops-tools
cloudsecurity
cloudcomputing
devsecops
multicloud
azure-devops
-
Updated
Jul 15, 2022
dirsigler
commented
Jul 28, 2021
Is your feature request related to a problem? Please describe.
I wanted to try Yor out for personal projects and found out, that the Terraform provider I use are as it seems not supported to run Yor against it.
For example I have a K3S Cluster at Civo or some development machines at Scaleway.
As it seems DigitalOcean is also not supported - at least I don't receive any errors or recommended
good first issue
Good for newcomers
云环境利用框架 Cloud Exploitation Framework 方便红队人员在获得 AK 的后续工作
cloud
cybersecurity
aliyun
cyber-security
cloudsecurity
cloud-security
redteam
alibabacloud
tencentcloud
-
Updated
Jul 14, 2022 - Go
awesome cloud security || 收集一些国内外不错的云安全资源，该项目主要面向国内的安全人员
docker
kubernetes
awesome
tools
cybersecurity
cloud-native
cloudnative
cloudsecurity
cloud-security
awesome-cloud-security
-
Updated
Jul 14, 2022
Cloudlist is a tool for listing Assets from multiple Cloud Providers.
-
Updated
Jul 11, 2022 - Go
Dow Jones Hammer : Protect the cloud with the power of the cloud(AWS)
-
Updated
May 18, 2022 - Python
Vajra is a UI-based tool with multiple techniques for attacking and enumerating in the target's Azure and AWS environment. It features an intuitive web-based user interface built with the Python Flask module for a better user experience. The primary focus of this tool is to have different attacking techniques all at one place with web UI interfaces.
-
Updated
Jul 7, 2022 - CSS
T Wiki 云安全知识文库，可能是国内首个云安全知识文库？
-
Updated
Jul 14, 2022
TerraformGoat is HuoCorp research lab's "Vulnerable by Design" multi cloud deployment tool.
security
terraform
gcp
aws-security
cloudsecurity
cloud-security
azure-security
gcp-security
kubernetes-security
-
Updated
Jul 14, 2022 - HCL
rpCheckup is an AWS resource policy security checkup tool that identifies public, external account access, intra-org account access, and private resources.
-
Updated
Apr 22, 2021 - Go
Microsoft Sentinel 4 SecOps
microsoft
security
azure
incident-response
secops
threat-hunting
siem
hunting
soc
ir
cloudsecurity
threat-intelligence
azure-sentinel
microsoft-sentinel
-
Updated
Jul 2, 2022 - PowerShell
rezoan
commented
Jul 14, 2021
In my ubuntu 20.04.2.0, i have python 2.7.18 and pip3 20.0.2.
I was trying to install prancer-basic via pip3 install prancer-basic
It get installed successfully with below warning:
WARNING: The scripts populate_json, prancer, register_key_in_azure_vault, terraform_to_json and validator are installed in '/home/r4redu/.local/bin' which is not on PATH.
Consider adding this director
A Cloud Security Posture Manager or CSPM with a focus on security analysis for the modern cloud stack and a focus on the emerging threat landscape such as cloud ransomware and supply chain attacks.
aws
security
security-audit
cloud
gcp
security-vulnerability
security-scanner
security-tools
cloudsecurity
security-testing
cspm
-
Updated
Jun 29, 2022 - Java
Monitor the internet attack surface of various public cloud environments. Currently supports AWS, GCP, Azure, DigitalOcean and Oracle Cloud.
aws
digitalocean
serverless
azure
api-gateway
dynamodb
lambda-functions
gcp
oracle
cybersecurity
serverless-framework
cyber-security
aws-security
cloudsecurity
cloud-security
azure-security
gcp-security
shadowrisk
shadow-risk
-
Updated
Jun 23, 2022 - Python
Cfngoat is Bridgecrew's "Vulnerable by Design" Cloudformation repository. Cfngoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.
-
Updated
Jun 29, 2022
windows
macos
linux
php
security
security-audit
laravel
cloud
networking
cybersecurity
penetration-testing
pentesting
vulnerability-detection
vulnerability-management
vulnerability-scanners
vulnerability-assessment
security-tools
cloudsecurity
vulnerability-scanning
vulnerability-scanner
-
Updated
Jul 15, 2022
A schema and set of tools for using SQL to query cloud infrastructure.
aws
security
postgres
sql
iam
secops
cloud-infrastructure
cmdb
infosec
database-schema
aws-security
security-groups
security-tools
cloudsecurity
devsecops
cloud-security
compliance-as-code
compliance-automation
cspm
infrastructure-as-deployed
-
Updated
Oct 8, 2021 - Python
Static analysis for CloudFormation templates to identify common misconfiguration
go
golang
aws
cloudformation
static-analysis
aws-cloudformation
hacktoberfest
aws-sam
cloudsecurity
aws-sam-cli
-
Updated
Feb 16, 2022 - Go
A Lambda-powered Security Orchestration framework for AWS GuardDuty
aws
cloud
aws-lambda
incident-response
cybersecurity
siem
threatintel
aws-security
blueteam
cloudsecurity
soar
aws-guardduty
-
Updated
Dec 15, 2019 - Python
Terraform provider for Policy Sentry (IAM least privilege generator and auditor)
-
Updated
Jul 6, 2022 - Go
This repository contains links to awesome security articles.
-
Updated
May 9, 2022
HazProne is a Cloud Pentesting Framework that emulates close to Real-World Scenarios by deploying Vulnerable-By-Demand AWS resources enabling you to pentest Vulnerabilities within, and hence, gain a better understanding of what could go wrong and why!!
terraform
cybersecurity
aws-security
cloudsecurity
cloud-security
cybersecurity-incidents
cybersecurity-education
hazprone
-
Updated
Jul 15, 2022 - HCL
SGX-ready Enclaive Docker Image for Nginx
docker
nginx
kubernetes
cloud
docker-image
container
sgx
cloudsecurity
sgx-enclave
zero-trust
confidential-computing
zero-trust-cloud
-
Updated
Jun 24, 2022 - C
A carefully curated list of open source projects aimed at improving your AWS security posture!
-
Updated
Feb 22, 2022
DeepLint is a Security-as-Code framework for securing and optimizing cloud environments.
-
Updated
Jun 1, 2022 - TypeScript
Improve this page
Add a description, image, and links to the cloudsecurity topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the cloudsecurity topic, visit your repo's landing page and select "manage topics."
Enhancement Request
Other security scanning tools (e.g.
checkovandtfsec) have a--soft-failflag or equivalent option that allows you to always exit with 0 status.Extremely useful when running the tool without halting a pipeline for example.
I currently use a workaround, but something more concrete would be very desira