NetSPI/MicroBurst

Monkey365 is an open-source security assessment tool for Microsoft 365, Azure, and Microsoft Entra ID. It helps security professionals identify misconfigurations, review cloud security posture, and evaluate environments against industry security best practices and compliance standards.

A collection of Azure AD/Entra tools for offensive and defensive security purposes

Automating situational awareness for cloud penetration tests.

Welcome to the Microsoft Defender for Cloud community repository

Cloud Security Posture Management (CSPM)

Microsoft Azure PowerShell

Initial Access and Post-Exploitation Tool for Entra ID and M365 with a browser-based GUI

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool