aws security tools

[D4rkn3S]

hello guys, here is github link of AWS security tools

 

Spoiler

Defensive (Hardening, Security Assessment, Inventory)

Scout2:

This is the hidden content, please

• Sign In
• or
• Sign Up

- Security auditing tool for AWS environments (Python)
Prowler:

This is the hidden content, please

• Sign In
• or
• Sign Up

- CIS benchmarks and additional checks for security best practices in AWS (Shell Script)
Scans:

This is the hidden content, please

• Sign In
• or
• Sign Up

- AWS security scanning checks (NodeJS)
CloudMapper:

This is the hidden content, please

• Sign In
• or
• Sign Up

- helps you analyze your AWS environments (Python)
CloudTracker:

This is the hidden content, please

• Sign In
• or
• Sign Up

- helps you find over-privileged IAM users and roles by comparing CloudTrail logs with current IAM policies (Python)
AWS Security Benchmarks:

This is the hidden content, please

• Sign In
• or
• Sign Up

- scrips and templates guidance related to the AWS CIS Foundation framework (Python)
AWS Public IPs:

This is the hidden content, please

• Sign In
• or
• Sign Up

- Fetch all public IP addresses tied to your AWS account. Works with IPv4/IPv6, Classic/VPC networking, and across all AWS services (Ruby)
PMapper:

This is the hidden content, please

• Sign In
• or
• Sign Up

- Advanced and Automated AWS IAM Evaluation (Python)
AWS-Inventory:

This is the hidden content, please

• Sign In
• or
• Sign Up

- Make a inventory of all your resources across regions (Python)
Resource Counter:

This is the hidden content, please

• Sign In
• or
• Sign Up

- Counts number of resources in categories across regions
ICE:

This is the hidden content, please

• Sign In
• or
• Sign Up

- Ice provides insights from a usage and cost perspective, with high detail dashboards.
SkyArk:

This is the hidden content, please

• Sign In
• or
• Sign Up

- SkyArk provides advanced discovery and security assessment for the most privileged entities in the tested AWS.
Offensive:

weirdALL:

This is the hidden content, please

• Sign In
• or
• Sign Up

- AWS Attack Library
Pacu:

This is the hidden content, please

• Sign In
• or
• Sign Up

- AWS penetration testing toolkit
Cred Scanner:

This is the hidden content, please

• Sign In
• or
• Sign Up

AWS PWN:

This is the hidden content, please

• Sign In
• or
• Sign Up

Cloudfrunt:

This is the hidden content, please

• Sign In
• or
• Sign Up

Cloudjack:

This is the hidden content, please

• Sign In
• or
• Sign Up

Nimbostratus:

This is the hidden content, please

• Sign In
• or
• Sign Up

Continuous Security Auditing:

Security Monkey:

This is the hidden content, please

• Sign In
• or
• Sign Up

Krampus (as Security Monkey complement)

This is the hidden content, please

• Sign In
• or
• Sign Up

Cloud Inquisitor:

This is the hidden content, please

• Sign In
• or
• Sign Up

CloudCustodian:

This is the hidden content, please

• Sign In
• or
• Sign Up

Disable keys after X days:

This is the hidden content, please

• Sign In
• or
• Sign Up

Repokid Least Privilege:

This is the hidden content, please

• Sign In
• or
• Sign Up

Wazuh CloudTrail module:

This is the hidden content, please

• Sign In
• or
• Sign Up

Hammer:

This is the hidden content, please

• Sign In
• or
• Sign Up

Streamalert:

This is the hidden content, please

• Sign In
• or
• Sign Up

DFIR:

AWS IR:

This is the hidden content, please

• Sign In
• or
• Sign Up

- AWS specific Incident Response and Forensics Tool
Margaritashotgun:

This is the hidden content, please

• Sign In
• or
• Sign Up

- Linux memory remote acquisition tool
LiMEaide:

This is the hidden content, please

• Sign In
• or
• Sign Up

- Linux memory remote acquisition tool
Diffy:

This is the hidden content, please

• Sign In
• or
• Sign Up

- Triage tool used during cloud-centric security incidents
Development Security:

CFN NAG:

This is the hidden content, please

• Sign In
• or
• Sign Up

- CloudFormation security test (Ruby)
Git-secrets:

This is the hidden content, please

• Sign In
• or
• Sign Up

Repository of sample Custom Rules for AWS Config:

This is the hidden content, please

• Sign In
• or
• Sign Up

S3 Buckets Auditing:

This is the hidden content, please

• Sign In
• or
• Sign Up

This is the hidden content, please

• Sign In
• or
• Sign Up

This is the hidden content, please

• Sign In
• or
• Sign Up

This is the hidden content, please

• Sign In
• or
• Sign Up

This is the hidden content, please

• Sign In
• or
• Sign Up

This is the hidden content, please

• Sign In
• or
• Sign Up

This is the hidden content, please

• Sign In
• or
• Sign Up

This is the hidden content, please

• Sign In
• or
• Sign Up

This is the hidden content, please

• Sign In
• or
• Sign Up

This is the hidden content, please

• Sign In
• or
• Sign Up

This is the hidden content, please

• Sign In
• or
• Sign Up

This is the hidden content, please

• Sign In
• or
• Sign Up

This is the hidden content, please

• Sign In
• or
• Sign Up

This is the hidden content, please

• Sign In
• or
• Sign Up

This is the hidden content, please

• Sign In
• or
• Sign Up

This is the hidden content, please

• Sign In
• or
• Sign Up

This is the hidden content, please

• Sign In
• or
• Sign Up

This is the hidden content, please

• Sign In
• or
• Sign Up

|

This is the hidden content, please

• Sign In
• or
• Sign Up

  [Currently Offline]

This is the hidden content, please

• Sign In
• or
• Sign Up

Training:

This is the hidden content, please

• Sign In
• or
• Sign Up

Others:

This is the hidden content, please

• Sign In
• or
• Sign Up

- a list of some biggest leaks recorded

 

This is the hidden content, please

• Sign In
• or
• Sign Up