aljaz/my-arsenal-of-aws-security-tools
1
1
Fork 0
mirror of https://github.com/toniblyx/my-arsenal-of-aws-security-tools.git synced 2025-12-17 08:04:20 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add 'Adversary emulation' category by @christophetd

Browse Source 
Add 'Adversary emulation' category by @christophetd
This commit is contained in:
Toni de la Fuente
2022-02-01 14:18:32 +01:00
committed by GitHub
parent c9878a464c 71e183882b
commit e7a8c74b45
1 changed files with 9 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
README.md
View File

@@ -4,6 +4,7 @@
- [Contribute](#contribute) - [Contribute](#contribute)
- [Defensive](#defensive-hardening-security-assessment-and-inventory) - [Defensive](#defensive-hardening-security-assessment-and-inventory)
- [Offensive](#offensive) - [Offensive](#offensive)
- [Purple Teaming & Adversary Emulation](#purple-teaming--adversary-emulation)
- [Continuous Security Auditing](#continuous-security-auditing) - [Continuous Security Auditing](#continuous-security-auditing)
- [Digital Forensics and Incident Response](#digital-forensics-and-incident-response) - [Digital Forensics and Incident Response](#digital-forensics-and-incident-response)
- [Development Security](#development-security) - [Development Security](#development-security)
@@ -97,6 +98,14 @@ Do you want to contribute to this list? Feel free to send a PR and make sure you
| **Redboto** | [https://github.com/elitest/Redboto](https://github.com/elitest/Redboto) | Red Team AWS Scripts | [![stars](https://badgen.net/github/stars/elitest/Redboto)](https://badgen.net/github/stars/elitest/Redboto) | [![contributors](https://badgen.net/github/contributors/elitest/Redboto)](https://badgen.net/github/contributors/elitest/Redboto) [![watchers](https://badgen.net/github/watchers/elitest/Redboto)](https://badgen.net/github/watchers/elitest/Redboto) [![last-commit](https://badgen.net/github/last-commit/elitest/Redboto)](https://badgen.net/github/last-commit/elitest/Redboto) [![open-issues](https://badgen.net/github/open-issues/elitest/Redboto)](https://badgen.net/github/open-issues/elitest/Redboto) [![closed-issues](https://badgen.net/github/closed-issues/elitest/Redboto)](https://badgen.net/github/closed-issues/elitest/Redboto) | | **Redboto** | [https://github.com/elitest/Redboto](https://github.com/elitest/Redboto) | Red Team AWS Scripts | [![stars](https://badgen.net/github/stars/elitest/Redboto)](https://badgen.net/github/stars/elitest/Redboto) | [![contributors](https://badgen.net/github/contributors/elitest/Redboto)](https://badgen.net/github/contributors/elitest/Redboto) [![watchers](https://badgen.net/github/watchers/elitest/Redboto)](https://badgen.net/github/watchers/elitest/Redboto) [![last-commit](https://badgen.net/github/last-commit/elitest/Redboto)](https://badgen.net/github/last-commit/elitest/Redboto) [![open-issues](https://badgen.net/github/open-issues/elitest/Redboto)](https://badgen.net/github/open-issues/elitest/Redboto) [![closed-issues](https://badgen.net/github/closed-issues/elitest/Redboto)](https://badgen.net/github/closed-issues/elitest/Redboto) |
| **CloudBrute** | [https://github.com/0xsha/cloudbrute](https://github.com/0xsha/cloudbrute) | A tool to find a company (target) infrastructure, files, and apps on the top cloud providers | [![stars](https://badgen.net/github/stars/0xsha/cloudbrute)](https://badgen.net/github/stars/0xsha/cloudbrute) | [![contributors](https://badgen.net/github/contributors/0xsha/cloudbrute)](https://badgen.net/github/contributors/0xsha/cloudbrute) [![watchers](https://badgen.net/github/watchers/0xsha/cloudbrute)](https://badgen.net/github/watchers/0xsha/cloudbrute) [![last-commit](https://badgen.net/github/last-commit/0xsha/cloudbrute)](https://badgen.net/github/last-commit/0xsha/cloudbrute) [![open-issues](https://badgen.net/github/open-issues/0xsha/cloudbrute)](https://badgen.net/github/open-issues/0xsha/cloudbrute) [![closed-issues](https://badgen.net/github/closed-issues/0xsha/cloudbrute)](https://badgen.net/github/closed-issues/0xsha/cloudbrute) | | **CloudBrute** | [https://github.com/0xsha/cloudbrute](https://github.com/0xsha/cloudbrute) | A tool to find a company (target) infrastructure, files, and apps on the top cloud providers | [![stars](https://badgen.net/github/stars/0xsha/cloudbrute)](https://badgen.net/github/stars/0xsha/cloudbrute) | [![contributors](https://badgen.net/github/contributors/0xsha/cloudbrute)](https://badgen.net/github/contributors/0xsha/cloudbrute) [![watchers](https://badgen.net/github/watchers/0xsha/cloudbrute)](https://badgen.net/github/watchers/0xsha/cloudbrute) [![last-commit](https://badgen.net/github/last-commit/0xsha/cloudbrute)](https://badgen.net/github/last-commit/0xsha/cloudbrute) [![open-issues](https://badgen.net/github/open-issues/0xsha/cloudbrute)](https://badgen.net/github/open-issues/0xsha/cloudbrute) [![closed-issues](https://badgen.net/github/closed-issues/0xsha/cloudbrute)](https://badgen.net/github/closed-issues/0xsha/cloudbrute) |
## Purple Teaming & Adversary Emulation
| Name | URL | Description | Popularity | Metadata |
| ---------- | :---------- | :---------- | :----------: | :----------: |
| **Stratus Red Team** | [https://github.com/datadog/stratus-red-team](https://github.com/datadog/stratus-red-team) | Granular, Actionable Adversary Emulation for the Cloud | [![stars](https://badgen.net/github/stars/datadog/stratus-red-team)](https://badgen.net/github/stars/datadog/stratus-red-team) | [![contributors](https://badgen.net/github/contributors/datadog/stratus-red-team)](https://badgen.net/github/contributors/datadog/stratus-red-team) [![watchers](https://badgen.net/github/watchers/datadog/stratus-red-team)](https://badgen.net/github/watchers/datadog/stratus-red-team) [![last-commit](https://badgen.net/github/last-commit/datadog/stratus-red-team)](https://badgen.net/github/last-commit/datadog/stratus-red-team) [![open-issues](https://badgen.net/github/open-issues/datadog/stratus-red-team)](https://badgen.net/github/open-issues/datadog/stratus-red-team) [![closed-issues](https://badgen.net/github/closed-issues/datadog/stratus-red-team)](https://badgen.net/github/closed-issues/datadog/stratus-red-team) |
| **Leonidas** | [https://github.com/fsecurelabs/leonidas](https://github.com/fsecurelabs/leonidas) | Automated Attack Simulation in the Cloud complete with detection use cases. | [![stars](https://badgen.net/github/stars/fsecurelabs/leonidas)](https://badgen.net/github/stars/fsecurelabs/leonidas) | [![contributors](https://badgen.net/github/contributors/fsecurelabs/leonidas)](https://badgen.net/github/contributors/fsecurelabs/leonidas) [![watchers](https://badgen.net/github/watchers/fsecurelabs/leonidas)](https://badgen.net/github/watchers/fsecurelabs/leonidas) [![last-commit](https://badgen.net/github/last-commit/fsecurelabs/leonidas)](https://badgen.net/github/last-commit/fsecurelabs/leonidas) [![open-issues](https://badgen.net/github/open-issues/fsecurelabs/leonidas)](https://badgen.net/github/open-issues/fsecurelabs/leonidas) [![closed-issues](https://badgen.net/github/closed-issues/fsecurelabs/leonidas)](https://badgen.net/github/closed-issues/fsecurelabs/leonidas) |
| **Amazon Guardduty Tester** | [https://github.com/awslabs/amazon-guardduty-tester](https://github.com/awslabs/amazon-guardduty-tester) | This script is used to generate some basic detections of the GuardDuty service | [![stars](https://badgen.net/github/stars/awslabs/amazon-guardduty-tester)](https://badgen.net/github/stars/awslabs/amazon-guardduty-tester) | [![contributors](https://badgen.net/github/contributors/awslabs/amazon-guardduty-tester)](https://badgen.net/github/contributors/awslabs/amazon-guardduty-tester) [![watchers](https://badgen.net/github/watchers/awslabs/amazon-guardduty-tester)](https://badgen.net/github/watchers/awslabs/amazon-guardduty-tester) [![last-commit](https://badgen.net/github/last-commit/awslabs/amazon-guardduty-tester)](https://badgen.net/github/last-commit/awslabs/amazon-guardduty-tester) [![open-issues](https://badgen.net/github/open-issues/awslabs/amazon-guardduty-tester)](https://badgen.net/github/open-issues/awslabs/amazon-guardduty-tester) [![closed-issues](https://badgen.net/github/closed-issues/awslabs/amazon-guardduty-tester)](https://badgen.net/github/closed-issues/awslabs/amazon-guardduty-tester) |
## Continuous Security Auditing ## Continuous Security Auditing
| Name | URL | Description | Popularity | Metadata | | Name | URL | Description | Popularity | Metadata |
| ---------- | :---------- | :---------- | :----------: | :----------: | | ---------- | :---------- | :---------- | :----------: | :----------: |
@@ -217,7 +226,6 @@ Do you want to contribute to this list? Feel free to send a PR and make sure you
| **Sadcloud** | [https://github.com/nccgroup/sadcloud](https://github.com/nccgroup/sadcloud) | A tool for spinning up insecure AWS infrastructure with Terraform. It supports approx. 84 misconfigurations across 22 AWS Services.|[![stars](https://badgen.net/github/stars/nccgroup/sadcloud)](https://badgen.net/github/stars/nccgroup/sadcloud)| [![contributors](https://badgen.net/github/contributors/nccgroup/sadcloud)](https://badgen.net/github/contributors/nccgroup/sadcloud)[![watchers](https://badgen.net/github/watchers/nccgroup/sadcloud)](https://badgen.net/github/watchers/nccgroup/sadcloud)[![last-commit](https://badgen.net/github/last-commit/nccgroup/sadcloud)](https://badgen.net/github/last-commit/nccgroup/sadcloud) [![open-issues](https://badgen.net/github/open-issues/nccgroup/sadcloud)](https://badgen.net/github/open-issues/nccgroup/sadcloud) [![closed-issues](https://badgen.net/github/closed-issues/nccgroup/sadcloud)](https://badgen.net/github/closed-issues/nccgroup/sadcloud) | | **Sadcloud** | [https://github.com/nccgroup/sadcloud](https://github.com/nccgroup/sadcloud) | A tool for spinning up insecure AWS infrastructure with Terraform. It supports approx. 84 misconfigurations across 22 AWS Services.|[![stars](https://badgen.net/github/stars/nccgroup/sadcloud)](https://badgen.net/github/stars/nccgroup/sadcloud)| [![contributors](https://badgen.net/github/contributors/nccgroup/sadcloud)](https://badgen.net/github/contributors/nccgroup/sadcloud)[![watchers](https://badgen.net/github/watchers/nccgroup/sadcloud)](https://badgen.net/github/watchers/nccgroup/sadcloud)[![last-commit](https://badgen.net/github/last-commit/nccgroup/sadcloud)](https://badgen.net/github/last-commit/nccgroup/sadcloud) [![open-issues](https://badgen.net/github/open-issues/nccgroup/sadcloud)](https://badgen.net/github/open-issues/nccgroup/sadcloud) [![closed-issues](https://badgen.net/github/closed-issues/nccgroup/sadcloud)](https://badgen.net/github/closed-issues/nccgroup/sadcloud) |
| **BigOrange Actions** | [https://bigorange.cloud/actions/](https://bigorange.cloud/actions/) | Paste your IAM Policy and get a list of Actions it can effectively perform | | | | | | | **BigOrange Actions** | [https://bigorange.cloud/actions/](https://bigorange.cloud/actions/) | Paste your IAM Policy and get a list of Actions it can effectively perform | | | | | |
| **IncidentResponseGenerator** | [https://github.com/disruptops/IncidentResponseGenerator](https://github.com/disruptops/IncidentResponseGenerator) | Incident response generator for training classes |[![stars](https://badgen.net/github/stars/disruptops/IncidentResponseGenerator)](https://badgen.net/github/stars/disruptops/IncidentResponseGenerator)| [![contributors](https://badgen.net/github/contributors/disruptops/IncidentResponseGenerator)](https://badgen.net/github/contributors/disruptops/IncidentResponseGenerator)[![watchers](https://badgen.net/github/watchers/disruptops/IncidentResponseGenerator)](https://badgen.net/github/watchers/disruptops/IncidentResponseGenerator)[![last-commit](https://badgen.net/github/last-commit/disruptops/IncidentResponseGenerator)](https://badgen.net/github/last-commit/disruptops/IncidentResponseGenerator) [![open-issues](https://badgen.net/github/open-issues/disruptops/IncidentResponseGenerator)](https://badgen.net/github/open-issues/disruptops/IncidentResponseGenerator) [![closed-issues](https://badgen.net/github/closed-issues/disruptops/IncidentResponseGenerator)](https://badgen.net/github/closed-issues/disruptops/IncidentResponseGenerator) | | **IncidentResponseGenerator** | [https://github.com/disruptops/IncidentResponseGenerator](https://github.com/disruptops/IncidentResponseGenerator) | Incident response generator for training classes |[![stars](https://badgen.net/github/stars/disruptops/IncidentResponseGenerator)](https://badgen.net/github/stars/disruptops/IncidentResponseGenerator)| [![contributors](https://badgen.net/github/contributors/disruptops/IncidentResponseGenerator)](https://badgen.net/github/contributors/disruptops/IncidentResponseGenerator)[![watchers](https://badgen.net/github/watchers/disruptops/IncidentResponseGenerator)](https://badgen.net/github/watchers/disruptops/IncidentResponseGenerator)[![last-commit](https://badgen.net/github/last-commit/disruptops/IncidentResponseGenerator)](https://badgen.net/github/last-commit/disruptops/IncidentResponseGenerator) [![open-issues](https://badgen.net/github/open-issues/disruptops/IncidentResponseGenerator)](https://badgen.net/github/open-issues/disruptops/IncidentResponseGenerator) [![closed-issues](https://badgen.net/github/closed-issues/disruptops/IncidentResponseGenerator)](https://badgen.net/github/closed-issues/disruptops/IncidentResponseGenerator) |
| **Leonidas** | [https://github.com/fsecurelabs/leonidas](https://github.com/fsecurelabs/leonidas) | Automated Attack Simulation in the Cloud complete with detection use cases. | [![stars](https://badgen.net/github/stars/fsecurelabs/leonidas)](https://badgen.net/github/stars/fsecurelabs/leonidas) | [![contributors](https://badgen.net/github/contributors/fsecurelabs/leonidas)](https://badgen.net/github/contributors/fsecurelabs/leonidas) [![watchers](https://badgen.net/github/watchers/fsecurelabs/leonidas)](https://badgen.net/github/watchers/fsecurelabs/leonidas) [![last-commit](https://badgen.net/github/last-commit/fsecurelabs/leonidas)](https://badgen.net/github/last-commit/fsecurelabs/leonidas) [![open-issues](https://badgen.net/github/open-issues/fsecurelabs/leonidas)](https://badgen.net/github/open-issues/fsecurelabs/leonidas) [![closed-issues](https://badgen.net/github/closed-issues/fsecurelabs/leonidas)](https://badgen.net/github/closed-issues/fsecurelabs/leonidas) |
| **Breaking and Pwning Apps and Servers on AWS and Azure** | [https://github.com/appsecco/breaking-and-pwning-apps-and-servers-aws-azure-training](https://github.com/appsecco/breaking-and-pwning-apps-and-servers-aws-azure-training) | Course content, lab setup instructions and documentation of our very popular Breaking and Pwning Apps and Servers on AWS and Azure hands on training! |[![stars](https://badgen.net/github/stars/appsecco/breaking-and-pwning-apps-and-servers-aws-azure-training)](https://badgen.net/github/stars/appsecco/breaking-and-pwning-apps-and-servers-aws-azure-training)| [![contributors](https://badgen.net/github/contributors/appsecco/breaking-and-pwning-apps-and-servers-aws-azure-training)](https://badgen.net/github/contributors/appsecco/breaking-and-pwning-apps-and-servers-aws-azure-training)[![watchers](https://badgen.net/github/watchers/appsecco/breaking-and-pwning-apps-and-servers-aws-azure-training)](https://badgen.net/github/watchers/appsecco/breaking-and-pwning-apps-and-servers-aws-azure-training)[![last-commit](https://badgen.net/github/last-commit/appsecco/breaking-and-pwning-apps-and-servers-aws-azure-training)](https://badgen.net/github/last-commit/appsecco/breaking-and-pwning-apps-and-servers-aws-azure-training) [![open-issues](https://badgen.net/github/open-issues/appsecco/breaking-and-pwning-apps-and-servers-aws-azure-training)](https://badgen.net/github/open-issues/appsecco/breaking-and-pwning-apps-and-servers-aws-azure-training) [![closed-issues](https://badgen.net/github/closed-issues/appsecco/breaking-and-pwning-apps-and-servers-aws-azure-training)](https://badgen.net/github/closed-issues/appsecco/breaking-and-pwning-apps-and-servers-aws-azure-training) | | **Breaking and Pwning Apps and Servers on AWS and Azure** | [https://github.com/appsecco/breaking-and-pwning-apps-and-servers-aws-azure-training](https://github.com/appsecco/breaking-and-pwning-apps-and-servers-aws-azure-training) | Course content, lab setup instructions and documentation of our very popular Breaking and Pwning Apps and Servers on AWS and Azure hands on training! |[![stars](https://badgen.net/github/stars/appsecco/breaking-and-pwning-apps-and-servers-aws-azure-training)](https://badgen.net/github/stars/appsecco/breaking-and-pwning-apps-and-servers-aws-azure-training)| [![contributors](https://badgen.net/github/contributors/appsecco/breaking-and-pwning-apps-and-servers-aws-azure-training)](https://badgen.net/github/contributors/appsecco/breaking-and-pwning-apps-and-servers-aws-azure-training)[![watchers](https://badgen.net/github/watchers/appsecco/breaking-and-pwning-apps-and-servers-aws-azure-training)](https://badgen.net/github/watchers/appsecco/breaking-and-pwning-apps-and-servers-aws-azure-training)[![last-commit](https://badgen.net/github/last-commit/appsecco/breaking-and-pwning-apps-and-servers-aws-azure-training)](https://badgen.net/github/last-commit/appsecco/breaking-and-pwning-apps-and-servers-aws-azure-training) [![open-issues](https://badgen.net/github/open-issues/appsecco/breaking-and-pwning-apps-and-servers-aws-azure-training)](https://badgen.net/github/open-issues/appsecco/breaking-and-pwning-apps-and-servers-aws-azure-training) [![closed-issues](https://badgen.net/github/closed-issues/appsecco/breaking-and-pwning-apps-and-servers-aws-azure-training)](https://badgen.net/github/closed-issues/appsecco/breaking-and-pwning-apps-and-servers-aws-azure-training) |
| **terragoat** | [https://github.com/bridgecrewio/terragoat](https://github.com/bridgecrewio/terragoat) | "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments. | [![stars](https://badgen.net/github/stars/bridgecrewio/terragoat)](https://badgen.net/github/stars/bridgecrewio/terragoat) | [![contributors](https://badgen.net/github/contributors/bridgecrewio/terragoat)](https://badgen.net/github/contributors/bridgecrewio/terragoat) [![watchers](https://badgen.net/github/watchers/bridgecrewio/terragoat)](https://badgen.net/github/watchers/bridgecrewio/terragoat) [![last-commit](https://badgen.net/github/last-commit/bridgecrewio/terragoat)](https://badgen.net/github/last-commit/bridgecrewio/terragoat) [![open-issues](https://badgen.net/github/open-issues/bridgecrewio/terragoat)](https://badgen.net/github/open-issues/bridgecrewio/terragoat) [![closed-issues](https://badgen.net/github/closed-issues/bridgecrewio/terragoat)](https://badgen.net/github/closed-issues/bridgecrewio/terragoat) | | **terragoat** | [https://github.com/bridgecrewio/terragoat](https://github.com/bridgecrewio/terragoat) | "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments. | [![stars](https://badgen.net/github/stars/bridgecrewio/terragoat)](https://badgen.net/github/stars/bridgecrewio/terragoat) | [![contributors](https://badgen.net/github/contributors/bridgecrewio/terragoat)](https://badgen.net/github/contributors/bridgecrewio/terragoat) [![watchers](https://badgen.net/github/watchers/bridgecrewio/terragoat)](https://badgen.net/github/watchers/bridgecrewio/terragoat) [![last-commit](https://badgen.net/github/last-commit/bridgecrewio/terragoat)](https://badgen.net/github/last-commit/bridgecrewio/terragoat) [![open-issues](https://badgen.net/github/open-issues/bridgecrewio/terragoat)](https://badgen.net/github/open-issues/bridgecrewio/terragoat) [![closed-issues](https://badgen.net/github/closed-issues/bridgecrewio/terragoat)](https://badgen.net/github/closed-issues/bridgecrewio/terragoat) |
| **cfngoat** | [https://github.com/bridgecrewio/cfngoat](https://github.com/bridgecrewio/cfngoat) | "Vulnerable by Design" cloudformation repository. CfnGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments. | [![stars](https://badgen.net/github/stars/bridgecrewio/cfngoat)](https://badgen.net/github/stars/bridgecrewio/cfngoat) | [![contributors](https://badgen.net/github/contributors/bridgecrewio/cfngoat)](https://badgen.net/github/contributors/bridgecrewio/cfngoat) [![watchers](https://badgen.net/github/watchers/bridgecrewio/cfngoat)](https://badgen.net/github/watchers/bridgecrewio/cfngoat) [![last-commit](https://badgen.net/github/last-commit/bridgecrewio/cfngoat)](https://badgen.net/github/last-commit/bridgecrewio/cfngoat) [![open-issues](https://badgen.net/github/open-issues/bridgecrewio/cfngoat)](https://badgen.net/github/open-issues/bridgecrewio/cfngoat) [![closed-issues](https://badgen.net/github/closed-issues/bridgecrewio/cfngoat)](https://badgen.net/github/closed-issues/bridgecrewio/cfngoat) | | **cfngoat** | [https://github.com/bridgecrewio/cfngoat](https://github.com/bridgecrewio/cfngoat) | "Vulnerable by Design" cloudformation repository. CfnGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments. | [![stars](https://badgen.net/github/stars/bridgecrewio/cfngoat)](https://badgen.net/github/stars/bridgecrewio/cfngoat) | [![contributors](https://badgen.net/github/contributors/bridgecrewio/cfngoat)](https://badgen.net/github/contributors/bridgecrewio/cfngoat) [![watchers](https://badgen.net/github/watchers/bridgecrewio/cfngoat)](https://badgen.net/github/watchers/bridgecrewio/cfngoat) [![last-commit](https://badgen.net/github/last-commit/bridgecrewio/cfngoat)](https://badgen.net/github/last-commit/bridgecrewio/cfngoat) [![open-issues](https://badgen.net/github/open-issues/bridgecrewio/cfngoat)](https://badgen.net/github/open-issues/bridgecrewio/cfngoat) [![closed-issues](https://badgen.net/github/closed-issues/bridgecrewio/cfngoat)](https://badgen.net/github/closed-issues/bridgecrewio/cfngoat) |