cyberstars
cyberstars / target / cloud

Tools for cloud

AWS, GCP, Azure, Kubernetes and containers.

48 tools indexed

Prowler

—

Multi-cloud security posture.

ScanHardenCloud
PythonApache-2.0

S3Scanner

—

Find misconfigured object storage buckets.

ScanReconCloud
GoMIT

ScoutSuite

—

Multi-cloud security auditing.

ScanHardenCloud
PythonGPL-2.0

Shuffle

—

Open-source SOAR.

AutomateMonitorNetworksEndpoints
JavaScriptAGPL-3.0

Snyk CLI

—

Open-source SCA + IaC scanner.

ScanAnalyzeSource codeCloud
TypeScriptApache-2.0

Splunk Attack Range

—

Build vulnerable instrumented labs.

AutomateExploitEndpointsNetworks
PythonApache-2.0

Syft

—

Generate SBOMs from containers and source code.

AnalyzeCloudSource code
GoApache-2.0

TeamFiltration

—

Cross-platform O365 / AAD attack framework.

ReconExploitCloudActive Directory
C#GPL-3.0

TeamsPhisher

—

Send phishing via Microsoft Teams.

ExploitAutomateCloudEndpoints
PythonGPL-3.0

Teleport

—

Zero-trust access for SSH, K8s and more.

HardenMonitorNetworksCloud
GoAGPL-3.0

Teller

—

Cloud-native secrets manager.

HardenAutomateCloudSource code
RustApache-2.0

Tetragon

—

eBPF-based runtime security.

MonitorHardenCloudEndpoints
GoApache-2.0

ThreatMapper

—

Open-source cloud-native protection platform.

ScanMonitorCloudIaC
JavaScriptApache-2.0

Trivy

—

Container and IaC vulnerability scanner.

ScanCloudIaC
GoApache-2.0

TruffleHog

—

Find leaked credentials at scale.

ScanSource codeCloud
GoAGPL-3.0

Vuls

—

Agent-less Linux vulnerability scanner.

ScanEndpointsCloud
GoGPL-3.0

Wazuh

—

Open-source XDR and SIEM.

MonitorScanEndpointsCloud
CAGPL-3.0

enumerate-iam

—

Enumerate AWS IAM permissions.

ReconCloud
PythonBSD-3-Clause

kube-bench

—

CIS benchmarks for Kubernetes.

ScanHardenCloud
GoApache-2.0

kube-hunter

—

Hunt for vulnerabilities in Kubernetes.

ScanCloud
PythonApache-2.0

step-ca

—

Private X.509 + SSH CA + ACME server.

HardenAutomateNetworksCloud
GoApache-2.0

tfsec

—

Terraform static analysis.

ScanHardenIaCCloud
GoMIT