This is a curated list of tools for this category.
- ASSAMEE - Free Advance Encryptor For Anon Cloud
- AWS Recon - Multi-threaded AWS Inventory Collection Tool With A Focus On Security-Relevant Resources And Metadata
- AWS Report - A Tool For Analyzing Amazon Resources
- AWS Report - Tool For Analyzing Amazon Resources
- AWS-Loot - Pull Secrets From An AWS Environment
- AWS-Threat-Simulation-and-Detection - Playing Around With Stratus Red Team (Cloud Attack Simulation Tool) And SumoLogic
- AWSGen.py - Generates Permutations, Alterations And Mutations Of AWS S3 Buckets Names
- Aaia - AWS Identity And Access Management Visualizer And Anomaly Finder
- AlertResponder - Automatic Security Alert Response Framework By AWS Serverless Application Model
- Anchore Engine - A Service That Analyzes Docker Images And Applies User-Defined Acceptance Policies To Allow Automated Container Image Validation And Certification
- ArmourBird CSF - Container Security Framework
- AutomatedLab - A Provisioning Solution And Framework That Lets You Deploy Complex Labs On HyperV And Azure With Simple PowerShell Scripts
- Aws-Security-Assessment-Solution - An AWS Tool To Help You Create A Point In Time Assessment Of Your AWS Account Using Prowler And Scout As Well As Optional AWS Developed Ransomware Checks
- Awspx - A Graph-Based Tool For Visualizing Effective Access And Resource Relationships In AWS Environments
- AzureRT - A Powershell Module Implementing Various Azure Red Team Tactics
- Bento - A Minimal Fedora-Based Container For Penetration Tests And CTF With The Sweet Addition Of GUI Applications
- BlobHunter - Find Exposed Data In Azure With This Public Blob Scanner
- BlueCloud - Cyber Range including Velociraptor + HELK system with a Windows VM for security testing and R&D
- Boomerang - A Tool To Expose Multiple Internal Servers To Web/Cloud
- Botkube - An App That Helps You Monitor Your Kubernetes Cluster, Debug Critical Deployments And Gives Recommendations For Standard Practices
- Bunkerized-Nginx - Nginx Docker Image Secure By Default
- ByteDance-HIDS - A Cloud-Native Host-Based Intrusion Detection Solution Project To Provide Next-Generation Threat Detection And Behavior Audition With Modern Architecture
- CDK - Zero Dependency Container Penetration Toolkit
- CRT - CrowdStrike Reporting Tool for Azure
- Checkov - Prevent Cloud Misconfigurations During Build-Time For Terraform, CloudFormation, Kubernetes, Serverless Framework And Other Infrastructure-As-Code-Languages
- Cloud Security Audit - A Command Line Security Audit Tool For Amazon Web Services
- Cloud-Sniper - Virtual Security Operations Center
- CloudSpec - An Open Source Tool For Validating Your Resources In Your Cloud Providers Using A Logical Language
- Cloudfox - Automating Situational Awareness For Cloud Penetration Tests
- Cloudlist - A Tool For Listing Assets From Multiple Cloud Providers
- Cloudquery - Transforms Your Cloud Infrastructure Into SQL Database For Easy Monitoring, Governance And Security
- Cloudsplaining - An AWS IAM Security Assessment Tool That Identifies Violations Of Least Privilege And Generates A Risk-Prioritized Report
- Cloudsploit - Cloud Security Posture Management (CSPM)
- Cloudtopolis - Cracking Hashes In The Cloud For Free
- Cnitch - Container Snitch Checks Running Processes Under The Docker Engine And Alerts If Any Are Found To Be Running As Root
- CobaltBus - Cobalt Strike External C2 Integration With Azure Servicebus, C2 Traffic Via Azure Servicebus
- DAGOBAH - Open Source Tool To Generate Internal Threat Intelligence, Inventory & Compliance Data From AWS Resources
- DFIR-O365RC - PowerShell Module For Office 365 And Azure AD Log Collection
- Dep-Scan - Fully Open-Source Security Audit For Project Dependencies Based On Known Vulnerabilities And Advisories. Supports Both Local Repos And Container Images. Integrates With Various CI Environments Such As Azure Pipelines, CircleCI, Google CloudBuild
- Dive - A Tool For Exploring Each Layer In A Docker Image
- Docker for Pentest - Image With The More Used Tools To Create A Pentest Environment Easily And Quickly
- Dockernymous - A Script Used To Create A Whonix Like Gateway/Workstation Environment With Docker Containers
- Dow Jones Hammer - Protect The Cloud With The Power Of The cloud(AWS)
- Dwn - D(Ockerp)Wn - A Docker Pwn Tool Manager
- Flan - A Pretty Sweet Vulnerability Scanner By CloudFlare
- FudgeC2 - A Collaborative C2 Framework For Purple-Teaming Written In Python3, Powershell And .NET
- Ghostbuster - Eliminate Dangling Elastic IPs By Performing Analysis On Your Resources Within All Your AWS Accounts
- GitOops - All Paths Lead To Clouds
- Gorsair - Hacks Its Way Into Remote Docker Containers That Expose Their APIs
- K0Otkit - Universal Post-Penetration Technique Which Could Be Used In Penetrations Against Kubernetes Clusters
- Klar - Integration Of Clair And Docker Registry
- Krane - Kubernetes RBAC Static Analysis And Visualisation Tool
- Kube-Alien - Tool To Launches Attack on K8s Cluster from Within
- Kube-Bench - Checks Whether Kubernetes Is Deployed According To Security Best Practices As Defined In The CIS Kubernetes Benchmark
- Kube-Hunter - Hunt For Security Weaknesses In Kubernetes Clusters
- Kube-Score - Kubernetes Object Analysis With Recommendations For Improved Reliability And Security
- KubeArmor - Container-aware Runtime Security Enforcement System
- KubeStalk - Discovers Kubernetes And Related Infrastructure Based Attack Surface From A Black-Box Perspective
- Kubeaudit - Tool To Audit Your Kubernetes Clusters Against Common Security Controls
- Kubebot - A Security Testing Slackbot Built With A Kubernetes Backend On The Google Cloud Platform
- Kubebox - Terminal And Web Console For Kubernetes
- Kubeclarity - Tool For Detection And Management Of Software Bill Of Materials (SBOM) And Vulnerabilities Of Container Images And Filesystems
- Kubestriker - A Blazing Fast Security Auditing Tool For Kubernetes
- KubiScan - A Tool To Scan Kubernetes Cluster For Risky Permissions
- Kubolt - Utility For Scanning Public Kubernetes Clusters
- Labtainers - A Docker-based Cyber Lab Framework
- LambdaGuard - AWS Serverless Security
- Lazydocker - The Lazier Way To Manage Everything Docker
- LeakDB - Web-Scale NoSQL Idempotent Cloud-Native Big-Data Serverless Plaintext Credential Search
- Leonidas - Automated Attack Simulation In The Cloud, Complete With Detection Use Cases
- Lockc - Making Containers More Secure With eBPF And Linux Security Modules (LSM)
- MAAD-AF - MAAD Attack Framework - An Attack Tool For Simple, Fast And Effective Security Testing Of M365 And Azure AD
- MSOLSpray - A Password Spraying Tool For Microsoft Online Accounts (Azure/O365)
- Matano - The Open-Source Security Lake Platform For AWS
- Mesh-Kridik - An Open-Source Security Checker That Performs Various Security Checks On A Kubernetes Cluster With Istio Service Mesh And Is Leveraged By OPA (Open Policy Agent) To Enforce Security Rules
- Mondoo - Cloud-Native Security And Vulnerability Risk Management
- Nightingale - Docker Environment For Pentesting Which Having All The Required Tool For VAPT
- Offensive-Azure - Collection Of Offensive Tools Targeting Microsoft Azure
- OpenCSPM - Open Cloud Security Posture Management Engine
- PEzor-Docker - With The Help Of This Docker Image, You Can Easily Access PEzor On Your System!
- Pacbot - Platform For Continuous Compliance Monitoring, Compliance Reporting And Security Automation For The Cloud
- Parrot 5.1 - Security GNU/Linux Distribution Designed with Cloud Pentesting and IoT Security in Mind
- Parrot Security 4.5 - Security GNU/Linux Distribution Designed with Cloud Pentesting and IoT Security in Mind
- Parrot Security 4.6 - Security GNU/Linux Distribution Designed with Cloud Pentesting and IoT Security in Mind
- Parrot Security 4.7 - Security GNU/Linux Distribution Designed with Cloud Pentesting and IoT Security in Mind
- Parsec - Secure Cloud Framework
- Peirates - Kubernetes Penetration Testing Tool
- Permission Manager - A Project That Brings Sanity To Kubernetes RBAC And Users Management, Web UI FTW
- Polaris - Validation Of Best Practices In Your Kubernetes Clusters
- Popeye - A Kubernetes Cluster Resource Sanitizer
- RAUDI - A Repo To Automatically Generate And Keep Updated A Series Of Docker Images Through GitHub Actions
- RE:TERNAL - Repo Containing Docker-Compose Files And Setup Scripts Without Having To Clone The Individual Reternal Components
- ROADtools - The Azure AD Exploration Framework
- Rakkess - Kubectl Plugin To Show An Access Matrix For K8S Server Resources
- Red-Detector - Scan Your EC2 Instance To Find Its Vulnerabilities Using Vuls.io
- Red-Kube - Red Team K8S Adversary Emulation Based On Kubectl
- Red-Shadow - Lightspin AWS IAM Vulnerability Scanner
- Redcloud - Automated Red Team Infrastructure Deployement Using Docker
- Redherd Framework -A Collaborative And Serverless Framework For Orchestrating A Geographically Distributed Group Of Assets
- Reportly - An AzureAD User Activity Report Tool
- Requests-Ip-Rotator - A Python Library To Utilize AWS API Gateway's Large IP Pool As A Proxy To Generate Pseudo-Infinite IPs For Web Scraping And Brute Forcing
- S3-Account-Search - S3 Account Search
- S3BucketList - Firefox Plugin The Lists Amazon S3 Buckets Found In Requests
- S3Crets_Scanner - Hunting For Secrets Uploaded To Public S3 Buckets
- S3Reverse - The Format Of Various S3 Buckets Is Convert In One Format
- S3Sec - Check AWS S3 Instances For Read/Write/Delete Access
- S3Tk - A Security Toolkit For Amazon S3
- ScoutSuite - Multi-Cloud Security Auditing Tool
- SecretScanner - Find Secrets And Passwords In Container Images And File Systems
- Serverless Prey - Serverless Functions For Establishing Reverse Shells To Lambda, Azure Functions, And Google Cloud Functions
- ShadowClone - Unleash The Power Of Cloud
- SkyArk - Helps To Discover, Assess And Secure The Most Privileged Entities In Azure And AWS
- SkyWrapper - Tool That Helps To Discover Suspicious Creation Forms And Uses Of Temporary Tokens In AWS
- Slurp - S3 Bucket Enumerator
- Slyther - AWS Security Tool
- Smogcloud - Find Cloud Assets That No One Wants Exposed
- SpaceSiren - A Honey Token Manager And Alert System For AWS
- SyntheticSun - A Defense-In-Depth Security Automation And Monitoring Framework Which Utilizes Threat Intelligence, Machine Learning, Managed AWS Security Services And, Serverless Technologies To Continuously Prevent, Detect And Respond To Threats
- SysFlow - Cloud-native System Telemetry Pipeline
- Tarian - Antivirus for Kubernetes
- Terraform AWS Secure Baseline - Terraform Module To Set Up Your AWS Account With The Secure Baseline Configuration Based On CIS Amazon Web Services Foundations
- Terrascan - Detect Compliance And Security Violations Across Infrastructure As Code To Mitigate Risk Before Provisioning Cloud Native Infrastructure
- Terrier - A Image And Container Analysis Tool To Identify And Verify The Presence Of Specific Files According To Their Hashes
- ThreatMapper - Identify Vulnerabilities In Running Containers, Images, Hosts And Repositories
- TokenTactics - Azure JWT Token Manipulation Toolset
- Tracee - Container And System Event Tracing Using eBPF
- Unblob - Extract Files From Any Kind Of Container Formats
- VPS-Docker-For-Pentest - Create A VPS On Google Cloud Platform Or Digital Ocean Easily With The Docker For Pentest
- Wave-Share - Serverless, Peer-To-Peer, Local File Sharing Through Sound
- Web-Hacking-Toolkit - A Multi-Platform Web Hacking Toolkit Docker Image With Graphical User Interface (GUI) Support
- Whoc - A Container Image That Extracts The Underlying Container Runtime
- YATAS - A Simple Tool To Audit Your AWS Infrastructure For Misconfiguration Or Potential Security Issues With Plugins Integration
- awsEnum - Enumerate AWS Cloud Resources Based On Provided Credential
- nuvola - Tool To Dump And Perform Automatic And Manual Security Analysis On Aws Environments Configurations And Services