🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

Focus on prompting and generating

Enables AWS Config and adds managed config rules with good defaults.

Guard offers a policy-as-code domain-specific language (DSL) to write rules and validate JSON- and YAML-formatted data such as CloudFormation Templates, K8s configurations, and Terraform JSON plans…

Tfsec is now part of Trivy

A tool to keep AWS pentests and red teams efficient, organized, and stealthy.

Real-ESRGAN aims at developing Practical Algorithms for General Image/Video Restoration.

Exploits written by the Rhino Security Labs team

Collection of Cyber Threat Intelligence sources from the deep and dark web

A Web Artisan list of categorized OPEN SOURCE PROJECTS built with Laravel PHP Framework.

Ahmia.fi Interface for Deep Web Parsing

Enumerate the permissions associated with AWS credential set

Multi-Cloud Security Auditing Tool

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

CLI tool to generate terraform files from existing infrastructure (reverse Terraform). Infrastructure to Code

A centralized source of all AWS IAM privilege escalation methods released by Rhino Security Labs.

Storage Explorer - Publicly open storage viewer (Amazon S3 Bucket, Azure Blob, FTP server, HTTP Index Of/)

Playing around with Stratus Red Team (Cloud Attack simulation tool) and SumoLogic

This repo includes Books and imp notes related to GCP, Azure, AWS, Docker, K8s, and DevOps. More, exam and interview prep notes.

My cheatsheet notes to pentest AWS infrastructure

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

A collection of awesome AWS S3 tools that collects and enumerates exposed S3 buckets

NVD, Ubuntu, Alpine

Security Remediation Guides

Fix color space list for Elgato Camlink devices

Remarkable - The Markdown Editor for Linux http:https://remarkableapp.github.io

The Havoc Framework.

CTFs as you need them