# Cloud & Containers


  • Cloudsplaining - Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report. last-commit
  • Greyhat Warfare - Search scanned archived AWS buckets.
  • pacu - The AWS exploitation framework, designed for testing the security of Amazon Web Services environments. last-commit
  • Prowler - Prowler is a security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. last-commit
  • ScoutSuite - Multi-Cloud Security Auditing Tool. last-commit
  • WeirdAAL - WeirdAAL (AWS Attack Library) last-commit

# Azure

  • Azurcar - Security auditing tool for Azure environments last-commit
  • Greyhat Warfare - Search scanned archived AWS buckets.
  • ScoutSuite - Multi-Cloud Security Auditing Tool ) last-commit

# Docker

# GitHub

  • gitleaks - Scan git repos (or files) for secrets using regex and entropy. last-commit
  • gitrob - Reconnaissance tool for GitHub organizations last-commit
  • GitRoller - GitRoller: A Git Recon Tools last-commit
  • go-gitaudit - Git audit is a go package which can be used to audit git repository to find issues. last-commit
  • shhgit - Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories. last-commit
  • truffleHog - Searches through git repositories for high entropy strings and secrets, digging deep into commit history. last-commit
  • Yar - Yar is a tool for plunderin' organizations, users and/or repositories. last-commit

# Kubernetes

  • IceKube - A tool to help find attack paths within a Kubernetes cluster from a low privileged point, to a preferred location, typically cluster-admin. last-commit