Tools
cloudfox
BishopFox/cloudfox
A command-line tool for cloud penetration testing that enumerates AWS, Azure and GCP resources, permissions and trust relationships to uncover exploitable attack paths.
Topics
Related projects
cloudsplaining2.3kCloudsplaining is an AWS IAM security assessment CLI that finds least-privilege violations and produces a risk-prioritized HTML report.
steampipe8kSteampipe lets you query cloud APIs, code, and logs with SQL in real time, using plugins that map external services to Postgres tables without any ETL.
cloudsploit3.8kCloudSploit is an open-source cloud security posture management scanner that audits AWS, Azure, GCP and other accounts for misconfigurations and compliance issues.- policy_sentry2.2kPolicy Sentry is a CLI and Python library that generates least-privilege AWS IAM policies from resource ARNs and access levels, helping teams avoid hand-writing overly broad permissions.
- powerpipe526Code-based dashboards for DevOps teams to visualize cloud infrastructure and run compliance benchmarks.
ScoutSuite7.9kMulti-Cloud Security Auditing Tool