A curated list of awesome Amazon Web Services (AWS) libraries, open source repos, guides, blogs, and other resources. Featuring the Fiery Meter of AWSome.

🎨 Diagram as Code for prototyping cloud system architectures

CLI tool to generate terraform files from existing infrastructure (reverse Terraform). Infrastructure to Code

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Set up a personal VPN in the cloud

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

Tfsec is now part of Trivy

CloudMapper helps you analyze your Amazon Web Services (AWS) environments.

Multi-Cloud Security Auditing Tool

Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

Cloud Security Posture Management (CSPM)

A Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365

Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS

A collection of GCP IAM privilege escalation methods documented by the Rhino Security Labs team.

Azure Red Team tool for graphing Azure and Azure Active Directory objects

A collection of bash shell scripts for automating various tasks with Amazon Web Services using the AWS CLI and jq.

🦍 The API and AI Gateway

Azure Data Exporter for BloodHound

A utility to convert your AWS CLI credentials into AWS console access.

Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.

A container image that exfiltrates the underlying container runtime to a remote server

A collection of Azure AD/Entra tools for offensive and defensive security purposes

TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts

A Post-exploitation Toolset for Interacting with the Microsoft Graph API

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It ca…

365-Stealer is a phishing simualtion tool written in python3. It can be used to execute Illicit Consent Grant Attack.

Scripts to interact with Microsoft Graph APIs

Initial Access and Post-Exploitation Tool for AAD and O365 with a browser-based GUI