Automating situational awareness for cloud penetration tests.
Like BishopFox/cloudfox, 0 likes 0 Bookmark BishopFox/cloudfox, 0 bookmarks 0 PEASS'o CSPM: open-source AWS, GCP, Azure and Kubernetes security posture, IAM and RBAC analysis
Like peass-ng/PEASSo-CSPM, 0 likes 0 Bookmark peass-ng/PEASSo-CSPM, 0 bookmarks 0 A tool to help pentesters quickly identify privileged principals and second-order privilege escalation opportunities in unfamiliar AWS accounts.
Like VirtueSecurity/IAMhounddog, 0 likes 0 Bookmark VirtueSecurity/IAMhounddog, 0 bookmarks 0 A collector and derivation engine. It maps your environment, evaluates effective permissions and trust, and writes a complete attack graph as a single .rage.ndjson file. The input to everything else.
Like ustayready/Thunderstorm, 0 likes 0 Bookmark ustayready/Thunderstorm, 0 bookmarks 0 Open-source cloud security reconnaissance framework
Like praetorian-inc/aurelian, 0 likes 0 Bookmark praetorian-inc/aurelian, 0 bookmarks 0 Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.
Like salesforce/cloudsplaining, 0 likes 0 Bookmark salesforce/cloudsplaining, 0 bookmarks 0 Real-world AI penetration testing engineer for authorized assessments — built-in cloud module covering AWS/Azure/GCP + Aliyun/Tencent/Huawei clouds. Built on Claude Agent SDK
Like cdxiaodong/cain-agent, 0 likes 0 Bookmark cdxiaodong/cain-agent, 0 bookmarks 0 An AWS IAM Privilege Escalation Path Library
Like DataDog/pathfinding.cloud, 0 likes 0 Bookmark DataDog/pathfinding.cloud, 0 bookmarks 0 Creating attacks paths across management and data planes
Like BishopFox/cirro, 0 likes 0 Bookmark BishopFox/cirro, 0 bookmarks 0 
