Deepfakes Software For All

Cloud cost estimates for Terraform in pull requests💰📉 Shift FinOps Left!

Eliminate dangling elastic IPs by performing analysis on your resources within all your AWS accounts.

Online client-side manager for secure storage and sharing of secrets.

CrowdSec - the open-source and participative security solution offering crowdsourced protection against malicious IPs and access to the most advanced real-world CTI.

Official Python client library for kubernetes

Kubernetes Security Training Platform - focusing on security mitigation

An evolving repository of CloudTrail events with detailed descriptions, MITRE ATT&CK insights, real-world incidents, references and security implications

SkyArk helps to discover, assess and secure the most privileged entities in Azure and AWS

Enumeration/exploit/analysis/download/etc pentesting framework for GCP; modeled like Pacu for AWS; a product of numerous hours via @WebbinRoot

Harness the security superpowers of your cloud asset inventory

A tool to uncover undocumented APIs from the AWS Console.

Automating situational awareness for cloud penetration tests.

💻 A fully functional local AWS cloud stack. Develop and test your cloud & Serverless apps offline

Crowdsourced list of sensitive IAM Actions

An open project to list all publicly known cloud vulnerabilities and CSP security issues

IAM-Deescalate helps mitigate privilege escalation risk in AWS identity and access management (IAM)

Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.

Python and tab completion, better together.

OSS-Fuzz - continuous fuzzing for open source software.

A collection of design patterns/idioms in Python

AutoMQ is a cloud-first alternative to Kafka by decoupling durability to S3 and EBS. 10x Cost-Effective. No Cross-AZ Traffic Cost. Autoscale in seconds. Single-digit ms latency.

Metlo is an open-source API security platform.

ClickHouse® is a real-time analytics DBMS

An opinionated GoLang framework for accelerated microservice development. Built in support for databases and observability.

Typescript implementation of Simple Serialize (SSZ)

Misconfig Mapper is a fast tool to help you uncover security misconfigurations on popular third-party services used by your company and/or bug bounty targets!

Ashok is a OSINT Recon Tool , a.k.a 😍 Swiss Army knife .