mirror of
https://github.com/toniblyx/my-arsenal-of-aws-security-tools.git
synced 2025-12-18 00:24:20 +01:00
Add clinv
This commit is contained in:
41
README.md
41
README.md
@@ -2,13 +2,13 @@
|
||||
Do you want to contribute to this list? Feel free to send a PR and make sure your tool is [Open Source](https://en.wikipedia.org/wiki/Open_source).
|
||||
|
||||
|
||||
| Name | URL | Description | Popularity | Metadata |
|
||||
| ---------- | :---------- | :---------- | :----------: | :----------: |
|
||||
| Name | URL | Description | Popularity | Metadata |
|
||||
| ---------- | :---------- | :---------- | :----------: | :----------: |
|
||||
| **My Arsenal of AWS Security Tools** | [https://github.com/toniblyx/my-arsenal-of-aws-security-tools](https://github.com/toniblyx/my-arsenal-of-aws-security-tools) | This list of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.|[](https://badgen.net/github/stars/toniblyx/my-arsenal-of-aws-security-tools)| [](https://badgen.net/github/contributors/toniblyx/my-arsenal-of-aws-security-tools) [](https://badgen.net/github/watchers/toniblyx/my-arsenal-of-aws-security-tools) [](https://badgen.net/github/last-commit/toniblyx/my-arsenal-of-aws-security-tools) [](https://badgen.net/github/open-issues/toniblyx/my-arsenal-of-aws-security-tools) [](https://badgen.net/github/closed-issues/toniblyx/my-arsenal-of-aws-security-tools) |
|
||||
|
||||
## Defensive: Hardening, Security Assessment and Inventory
|
||||
| Name | URL | Description | Popularity | Metadata |
|
||||
| ---------- | :---------- | :---------- | :----------: | :----------: |
|
||||
| Name | URL | Description | Popularity | Metadata |
|
||||
| ---------- | :---------- | :---------- | :----------: | :----------: |
|
||||
| **ScoutSuite** | [https://github.com/nccgroup/ScoutSuite](https://github.com/nccgroup/ScoutSuite) | Multi-Cloud Security auditing tool for AWS Google Cloud and Azure environments (python) |[](https://badgen.net/github/stars/nccgroup/ScoutSuite)| [](https://badgen.net/github/contributors/nccgroup/ScoutSuite)[](https://badgen.net/github/watchers/nccgroup/ScoutSuite)[](https://badgen.net/github/last-commit/nccgroup/ScoutSuite) [](https://badgen.net/github/open-issues/nccgroup/ScoutSuite) [](https://badgen.net/github/closed-issues/nccgroup/ScoutSuite) |
|
||||
| **Prowler** | [https://github.com/toniblyx/prowler](https://github.com/toniblyx/prowler) | CIS benchmarks and additional checks for security best practices in AWS (bash and python components) |[](https://badgen.net/github/stars/toniblyx/prowler)| [](https://badgen.net/github/contributors/toniblyx/prowler)[](https://badgen.net/github/watchers/toniblyx/prowler)[](https://badgen.net/github/last-commit/toniblyx/prowler) [](https://badgen.net/github/open-issues/toniblyx/prowler) [](https://badgen.net/github/closed-issues/toniblyx/prowler) |
|
||||
| **CloudSploit Scans** | [https://github.com/cloudsploit/scans](https://github.com/cloudsploit/scans) | AWS security scanning checks (NodeJS) |[](https://badgen.net/github/stars/cloudsploit/scans)| [](https://badgen.net/github/contributors/cloudsploit/scans)[](https://badgen.net/github/watchers/cloudsploit/scans)[](https://badgen.net/github/last-commit/cloudsploit/scans) [](https://badgen.net/github/open-issues/cloudsploit/scans) [](https://badgen.net/github/closed-issues/cloudsploit/scans) |
|
||||
@@ -39,10 +39,11 @@ Do you want to contribute to this list? Feel free to send a PR and make sure you
|
||||
| **Zeus** | [https://github.com/DenizParlak/Zeus](https://github.com/DenizParlak/Zeus) | AWS Auditing & Hardening Tool |[](https://badgen.net/github/stars/DenizParlak/Zeus)| [](https://badgen.net/github/contributors/DenizParlak/Zeus)[](https://badgen.net/github/watchers/DenizParlak/Zeus)[](https://badgen.net/github/last-commit/DenizParlak/Zeus) [](https://badgen.net/github/open-issues/DenizParlak/Zeus) [](https://badgen.net/github/closed-issues/DenizParlak/Zeus) |
|
||||
| **janiko71 AWS-inventory** | [https://github.com/janiko71/aws-inventory](https://github.com/janiko71/aws-inventory) | Python script for AWS resources inventory |[](https://badgen.net/github/stars/janiko71/aws-inventory)| [](https://badgen.net/github/contributors/janiko71/aws-inventory)[](https://badgen.net/github/watchers/janiko71/aws-inventory)[](https://badgen.net/github/last-commit/janiko71/aws-inventory) [](https://badgen.net/github/open-issues/janiko71/aws-inventory) [](https://badgen.net/github/closed-issues/janiko71/aws-inventory) |
|
||||
| **awspx** | [https://github.com/fsecurelabs/awspx](https://github.com/fsecurelabs/awspx) | A graph-based tool for visualizing effective access and resource relationships in AWS environments |[](https://badgen.net/github/stars/fsecurelabs/awspx)| [](https://badgen.net/github/contributors/fsecurelabs/awspx)[](https://badgen.net/github/watchers/fsecurelabs/awspx)[](https://badgen.net/github/last-commit/fsecurelabs/awspx) [](https://badgen.net/github/open-issues/fsecurelabs/awspx) [](https://badgen.net/github/closed-issues/fsecurelabs/awspx) |
|
||||
| **clinv** | [https://github.com/lyz-code/clinv](https://github.com/lyz-code/clinv) | A graph-based tool for visualizing effective access and resource relationships in AWS environments |[](https://badgen.net/github/stars/lyz-code/clinv)| [](https://badgen.net/github/contributors/lyz-code/clinv)[](https://badgen.net/github/watchers/lyz-code/clinv)[](https://badgen.net/github/last-commit/lyz-code/clinv) [](https://badgen.net/github/open-issues/lyz-code/clinv) [](https://badgen.net/github/closed-issues/lyz-code/clinv) |
|
||||
|
||||
## Offensive
|
||||
| Name | URL | Description | Popularity | Metadata |
|
||||
| ---------- | :---------- | :---------- | :----------: | :----------: |
|
||||
| Name | URL | Description | Popularity | Metadata |
|
||||
| ---------- | :---------- | :---------- | :----------: | :----------: |
|
||||
| **weirdALL** | [https://github.com/carnal0wnage/weirdAAL](https://github.com/carnal0wnage/weirdAAL) | AWS Attack Library |[](https://badgen.net/github/stars/carnal0wnage/weirdAAL)| [](https://badgen.net/github/contributors/carnal0wnage/weirdAAL)[](https://badgen.net/github/watchers/carnal0wnage/weirdAAL)[](https://badgen.net/github/last-commit/carnal0wnage/weirdAAL) [](https://badgen.net/github/open-issues/carnal0wnage/weirdAAL) [](https://badgen.net/github/closed-issues/carnal0wnage/weirdAAL) |
|
||||
| **Pacu** | [https://github.com/RhinoSecurityLabs/pacu](https://github.com/RhinoSecurityLabs/pacu) | AWS penetration testing toolkit |[](https://badgen.net/github/stars/RhinoSecurityLabs/pacu)| [](https://badgen.net/github/contributors/RhinoSecurityLabs/pacu)[](https://badgen.net/github/watchers/RhinoSecurityLabs/pacu)[](https://badgen.net/github/last-commit/RhinoSecurityLabs/pacu) [](https://badgen.net/github/open-issues/RhinoSecurityLabs/pacu) [](https://badgen.net/github/closed-issues/RhinoSecurityLabs/pacu) |
|
||||
| **Cred Scanner** | [https://github.com/disruptops/cred_scanner](https://github.com/disruptops/cred_scanner) | A simple file-based scanner to look for potential AWS access and secret keys in files |[](https://badgen.net/github/stars/disruptops/cred_scanner)| [](https://badgen.net/github/contributors/disruptops/cred_scanner)[](https://badgen.net/github/watchers/disruptops/cred_scanner)[](https://badgen.net/github/last-commit/disruptops/cred_scanner) [](https://badgen.net/github/open-issues/disruptops/cred_scanner) [](https://badgen.net/github/closed-issues/disruptops/cred_scanner) |
|
||||
@@ -63,8 +64,8 @@ Do you want to contribute to this list? Feel free to send a PR and make sure you
|
||||
| **CCAT** | [https://github.com/RhinoSecurityLabs/ccat](https://github.com/RhinoSecurityLabs/ccat) | Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments |[](https://badgen.net/github/stars/RhinoSecurityLabs/ccat)| [](https://badgen.net/github/contributors/RhinoSecurityLabs/ccat)[](https://badgen.net/github/watchers/RhinoSecurityLabs/ccat)[](https://badgen.net/github/last-commit/RhinoSecurityLabs/ccat) [](https://badgen.net/github/open-issues/RhinoSecurityLabs/ccat) [](https://badgen.net/github/closed-issues/RhinoSecurityLabs/ccat) |
|
||||
|
||||
## Continuous Security Auditing
|
||||
| Name | URL | Description | Popularity | Metadata |
|
||||
| ---------- | :---------- | :---------- | :----------: | :----------: |
|
||||
| Name | URL | Description | Popularity | Metadata |
|
||||
| ---------- | :---------- | :---------- | :----------: | :----------: |
|
||||
| **Security Monkey** | [https://github.com/Netflix/security_monkey](https://github.com/Netflix/security_monkey) | |[](https://badgen.net/github/stars/Netflix/security_monkey)| [](https://badgen.net/github/contributors/Netflix/security_monkey)[](https://badgen.net/github/watchers/Netflix/security_monkey)[](https://badgen.net/github/last-commit/Netflix/security_monkey) [](https://badgen.net/github/open-issues/Netflix/security_monkey) [](https://badgen.net/github/closed-issues/Netflix/security_monkey) |
|
||||
| **Krampus** | [https://github.com/sendgrid/krampus](https://github.com/sendgrid/krampus) | |[](https://badgen.net/github/stars/sendgrid/krampus)| [](https://badgen.net/github/contributors/sendgrid/krampus)[](https://badgen.net/github/watchers/sendgrid/krampus)[](https://badgen.net/github/last-commit/sendgrid/krampus) [](https://badgen.net/github/open-issues/sendgrid/krampus) [](https://badgen.net/github/closed-issues/sendgrid/krampus) |
|
||||
| **Cloud Inquisitor** | [https://github.com/RiotGames/cloud-inquisitor](https://github.com/RiotGames/cloud-inquisitor) | |[](https://badgen.net/github/stars/RiotGames/cloud-inquisitor)| [](https://badgen.net/github/contributors/RiotGames/cloud-inquisitor)[](https://badgen.net/github/watchers/RiotGames/cloud-inquisitor)[](https://badgen.net/github/last-commit/RiotGames/cloud-inquisitor) [](https://badgen.net/github/open-issues/RiotGames/cloud-inquisitor) [](https://badgen.net/github/closed-issues/RiotGames/cloud-inquisitor) |
|
||||
@@ -78,8 +79,8 @@ Do you want to contribute to this list? Feel free to send a PR and make sure you
|
||||
| **Watchmen** | [https://github.com/iagcl/watchmen](https://github.com/iagcl/watchmen) | AWS account compliance using centrally managed Config Rules |[](https://badgen.net/github/stars/iagcl/watchmen)| [](https://badgen.net/github/contributors/iagcl/watchmen)[](https://badgen.net/github/watchers/iagcl/watchmen)[](https://badgen.net/github/last-commit/iagcl/watchmen) [](https://badgen.net/github/open-issues/iagcl/watchmen) [](https://badgen.net/github/closed-issues/iagcl/watchmen) |
|
||||
|
||||
## Digital Forensics and Incident Response
|
||||
| Name | URL | Description | Popularity | Metadata |
|
||||
| ---------- | :---------- | :---------- | :----------: | :----------: |
|
||||
| Name | URL | Description | Popularity | Metadata |
|
||||
| ---------- | :---------- | :---------- | :----------: | :----------: |
|
||||
| **AWS IR** | [https://github.com/ThreatResponse/aws_ir](https://github.com/ThreatResponse/aws_ir) | AWS specific Incident Response and Forensics Tool |[](https://badgen.net/github/stars/ThreatResponse/aws_ir)| [](https://badgen.net/github/contributors/ThreatResponse/aws_ir)[](https://badgen.net/github/watchers/ThreatResponse/aws_ir)[](https://badgen.net/github/last-commit/ThreatResponse/aws_ir) [](https://badgen.net/github/open-issues/ThreatResponse/aws_ir) [](https://badgen.net/github/closed-issues/ThreatResponse/aws_ir) |
|
||||
| **Margaritashotgun** | [https://github.com/ThreatResponse/margaritashotgun](https://github.com/ThreatResponse/margaritashotgun) | Linux memory remote acquisition tool |[](https://badgen.net/github/stars/ThreatResponse/margaritashotgun)| [](https://badgen.net/github/contributors/ThreatResponse/margaritashotgun)[](https://badgen.net/github/watchers/ThreatResponse/margaritashotgun)[](https://badgen.net/github/last-commit/ThreatResponse/margaritashotgun) [](https://badgen.net/github/open-issues/ThreatResponse/margaritashotgun) [](https://badgen.net/github/closed-issues/ThreatResponse/margaritashotgun) |
|
||||
| **Diffy** | [https://github.com/Netflix-Skunkworks/diffy](https://github.com/Netflix-Skunkworks/diffy) | Triage tool used during cloud-centric security incidents |[](https://badgen.net/github/stars/Netflix-Skunkworks/diffy)| [](https://badgen.net/github/contributors/Netflix-Skunkworks/diffy)[](https://badgen.net/github/watchers/Netflix-Skunkworks/diffy)[](https://badgen.net/github/last-commit/Netflix-Skunkworks/diffy) [](https://badgen.net/github/open-issues/Netflix-Skunkworks/diffy) [](https://badgen.net/github/closed-issues/Netflix-Skunkworks/diffy) |
|
||||
@@ -92,8 +93,8 @@ Do you want to contribute to this list? Feel free to send a PR and make sure you
|
||||
| **fargate-ir** | [https://github.com/andrewkrug/fargate-ir](https://github.com/andrewkrug/fargate-ir) | Proof of concept incident response demo using SSM and AWS Fargate. |[](https://badgen.net/github/stars/andrewkrug/fargate-ir)| [](https://badgen.net/github/contributors/andrewkrug/fargate-ir)|[](https://badgen.net/github/watchers/andrewkrug/fargate-ir)|[](https://badgen.net/github/last-commit/andrewkrug/fargate-ir) | [](https://badgen.net/github/open-issues/andrewkrug/fargate-ir) |[](https://badgen.net/github/closed-issues/andrewkrug/fargate-ir) |
|
||||
|
||||
## Development Security
|
||||
| Name | URL | Description | Popularity | Metadata |
|
||||
| ---------- | :---------- | :---------- | :----------: | :----------: |
|
||||
| Name | URL | Description | Popularity | Metadata |
|
||||
| ---------- | :---------- | :---------- | :----------: | :----------: |
|
||||
| **CFN NAG** | [https://github.com/stelligent/cfn_nag](https://github.com/stelligent/cfn_nag) | CloudFormation security test (Ruby) |[](https://badgen.net/github/stars/stelligent/cfn_nag)| [](https://badgen.net/github/contributors/stelligent/cfn_nag)[](https://badgen.net/github/watchers/stelligent/cfn_nag)[](https://badgen.net/github/last-commit/stelligent/cfn_nag) [](https://badgen.net/github/open-issues/stelligent/cfn_nag) [](https://badgen.net/github/closed-issues/stelligent/cfn_nag) |
|
||||
| **Git-secrets** | [https://github.com/awslabs/git-secrets](https://github.com/awslabs/git-secrets) | |[](https://badgen.net/github/stars/awslabs/git-secrets)| [](https://badgen.net/github/contributors/awslabs/git-secrets)[](https://badgen.net/github/watchers/awslabs/git-secrets)[](https://badgen.net/github/last-commit/awslabs/git-secrets) [](https://badgen.net/github/open-issues/awslabs/git-secrets) [](https://badgen.net/github/closed-issues/awslabs/git-secrets) |
|
||||
| **Repository of sample Custom Rules for AWS Config** | [https://github.com/awslabs/aws-config-rules](https://github.com/awslabs/aws-config-rules) | |[](https://badgen.net/github/stars/awslabs/aws-config-rules)| [](https://badgen.net/github/contributors/awslabs/aws-config-rules)[](https://badgen.net/github/watchers/awslabs/aws-config-rules)[](https://badgen.net/github/last-commit/awslabs/aws-config-rules) [](https://badgen.net/github/open-issues/awslabs/aws-config-rules) [](https://badgen.net/github/closed-issues/awslabs/aws-config-rules) |
|
||||
@@ -114,8 +115,8 @@ Do you want to contribute to this list? Feel free to send a PR and make sure you
|
||||
| **detect-secrets** | [https://github.com/Yelp/detect-secrets](https://github.com/Yelp/detect-secrets) | An enterprise friendly way of detecting and preventing secrets in code. |[](https://badgen.net/github/stars/yelp/detect-secrets)| [](https://badgen.net/github/contributors/yelp/detect-secrets)[](https://badgen.net/github/watchers/yelp/detect-secrets)[](https://badgen.net/github/last-commit/yelp/detect-secrets) [](https://badgen.net/github/open-issues/yelp/detect-secrets) [](https://badgen.net/github/closed-issues/yelp/detect-secrets) |
|
||||
|
||||
## S3 Buckets Auditing
|
||||
| Name | URL | Description | Popularity | Metadata |
|
||||
| ---------- | :---------- | :---------- | :----------: | :----------: |
|
||||
| Name | URL | Description | Popularity | Metadata |
|
||||
| ---------- | :---------- | :---------- | :----------: | :----------: |
|
||||
| **sandcastle** | [https://github.com/Parasimpaticki/sandcastle](https://github.com/Parasimpaticki/sandcastle) | |[](https://badgen.net/github/stars/Parasimpaticki/sandcastle)| [](https://badgen.net/github/contributors/Parasimpaticki/sandcastle)[](https://badgen.net/github/watchers/Parasimpaticki/sandcastle)[](https://badgen.net/github/last-commit/Parasimpaticki/sandcastle) [](https://badgen.net/github/open-issues/Parasimpaticki/sandcastle) [](https://badgen.net/github/closed-issues/Parasimpaticki/sandcastle) |
|
||||
| **mass3** | [https://github.com/smiegles/mass3](https://github.com/smiegles/mass3) | |[](https://badgen.net/github/stars/smiegles/mass3)| [](https://badgen.net/github/contributors/smiegles/mass3)[](https://badgen.net/github/watchers/smiegles/mass3)[](https://badgen.net/github/last-commit/smiegles/mass3) [](https://badgen.net/github/open-issues/smiegles/mass3) [](https://badgen.net/github/closed-issues/smiegles/mass3) |
|
||||
| **s3enum** | [https://github.com/koenrh/s3enum](https://github.com/koenrh/s3enum) | |[](https://badgen.net/github/stars/koenrh/s3enum)| [](https://badgen.net/github/contributors/koenrh/s3enum)[](https://badgen.net/github/watchers/koenrh/s3enum)[](https://badgen.net/github/last-commit/koenrh/s3enum) [](https://badgen.net/github/open-issues/koenrh/s3enum) [](https://badgen.net/github/closed-issues/koenrh/s3enum) |
|
||||
@@ -144,8 +145,8 @@ Do you want to contribute to this list? Feel free to send a PR and make sure you
|
||||
| **aws-externder-cli** | [https://github.com/VirtueSecurity/aws-extender-cli](https://github.com/VirtueSecurity/aws-extender-cli) | |[](https://badgen.net/github/stars/VirtueSecurity/aws-extender-cli)| [](https://badgen.net/github/contributors/VirtueSecurity/aws-extender-cli)[](https://badgen.net/github/watchers/VirtueSecurity/aws-extender-cli)[](https://badgen.net/github/last-commit/VirtueSecurity/aws-extender-cli) [](https://badgen.net/github/open-issues/VirtueSecurity/aws-extender-cli) [](https://badgen.net/github/closed-issues/VirtueSecurity/aws-extender-cli) |
|
||||
|
||||
## Training
|
||||
| Name | URL | Description | Popularity | Metadata |
|
||||
| ---------- | :---------- | :---------- | :----------: | :----------: |
|
||||
| Name | URL | Description | Popularity | Metadata |
|
||||
| ---------- | :---------- | :---------- | :----------: | :----------: |
|
||||
| **Flaws.cloud** | [https://github.com/flaws.cloud](https://github.com/flaws.cloud) | flAWS challenge to learn through a series of levels about common mistakes and gotchas when using AWS | | | | | |
|
||||
| **Flaws2.cloud** | [https://github.com/flaws2.cloud](https://github.com/flaws2.cloud) | flAWS 2 has two paths this time Attacker and Defender! In the Attacker path you'll exploit your way through misconfigurations in serverless (Lambda) and containers (ECS Fargate). In the Defender path that target is now viewed as the victim and you'll work as an incident responder for that same app understanding how an attack happened | | | | | |
|
||||
| **CloudGoat** | [https://github.com/RhinoSecurityLabs/cloudgoat](https://github.com/RhinoSecurityLabs/cloudgoat) | Vulnerable by Design AWS infrastructure setup tool |[](https://badgen.net/github/stars/RhinoSecurityLabs/cloudgoat)| [](https://badgen.net/github/contributors/RhinoSecurityLabs/cloudgoat)[](https://badgen.net/github/watchers/RhinoSecurityLabs/cloudgoat)[](https://badgen.net/github/last-commit/RhinoSecurityLabs/cloudgoat) [](https://badgen.net/github/open-issues/RhinoSecurityLabs/cloudgoat) [](https://badgen.net/github/closed-issues/RhinoSecurityLabs/cloudgoat) |
|
||||
@@ -165,11 +166,11 @@ Do you want to contribute to this list? Feel free to send a PR and make sure you
|
||||
* [https://github.com/thinkst/canarytokens-docker](https://github.com/thinkst/canarytokens-docker)
|
||||
|
||||
**More Resources:**
|
||||
* **asecure.cloud** [https://github.com/asecure.cloud](https://github.com/asecure.cloud) A repository of cutomizable AWS security configurations (Cloudformation and CLI templates)
|
||||
* **asecure.cloud** [https://github.com/asecure.cloud](https://github.com/asecure.cloud) A repository of cutomizable AWS security configurations (Cloudformation and CLI templates)
|
||||
* **s3-leaks** [https://github.com/nagwww/s3-leaks](https://github.com/nagwww/s3-leaks) - a list of some biggest leaks recorded
|
||||
* **Model Risk AWS** [https://magoo.github.io/model-risk-aws/](https://magoo.github.io/model-risk-aws/) - POC about probabilistic risk model for AWS
|
||||
* **asecure.cloud** [https://asecure.cloud/](https://asecure.cloud/) - a great place for security resources regarding AWS Security.
|
||||
* **hoenybuckets** [https://github.com/honey-buckets/](https://github.com/honey-buckets/)
|
||||
* **thebuckhacker** [https://github.com/thebuckhacker](https://github.com/thebuckhacker)
|
||||
* **buckets.grayhatwarfare** [https://github.com/buckets.grayhatwarfare](https://github.com/buckets.grayhatwarfare)
|
||||
* **hoenybuckets** [https://github.com/honey-buckets/](https://github.com/honey-buckets/)
|
||||
* **thebuckhacker** [https://github.com/thebuckhacker](https://github.com/thebuckhacker)
|
||||
* **buckets.grayhatwarfare** [https://github.com/buckets.grayhatwarfare](https://github.com/buckets.grayhatwarfare)
|
||||
|
||||
|
||||
Reference in New Issue
Block a user