Cloud
Unauthenticated enumeration of AWS, Azure, and GCP Principals
🪄 Spin up ready-to-code, disposable dev environments on your own servers. Self-hosted alternative to Gitpod and Github Codespaces.
IAMbic is Version-Control for IAM. It centralizes and simplifies cloud access and permissions. It maintains an eventually consistent, human-readable, bi-directional representation of IAM in Git.
JIT Groups is an open source application that lets you implement secure, self-service access management for Google Cloud using groups.
Eliminate dangling elastic IPs by performing analysis on your resources within all your AWS accounts.
Chrome extension that generates CloudWatch Logs Insights queries from ChatGPT prompts
Comfortably monitor your Internet traffic 🕵️♂️
World's fastest log analysis: λ + SQL + JSON + S3
List of vendors that do not allow IMDSv2 enforcement
GUAC aggregates software security metadata into a high fidelity graph database.
BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.
Scale to zero Seafowl hosting with Cloud Run
The Sensitive Data Protection on AWS solution allows enterprise customers to create data catalogs, discover, protect, and visualize sensitive data across multiple AWS accounts. The solution elimina…
Fetch user-data from a cloud provider, set the hostname, and write files. A very minimal alternative to cloud-init.
ChatGPT plugin that will (one day) allow us to list and manage cloud resources
Determine privileges from cloud credentials via brute-force testing.
The lazier way to manage everything docker
Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submissio…
Resource types that can be publicly exposed on AWS
This repo contains IOC, malware and malware analysis associated with Public cloud
Threatest is a CLI and Go framework for end-to-end testing threat detection rules.

