Skip to content
List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
Branch: master
Clone or download
Latest commit e688170 Mar 19, 2019
Type Name Latest commit message Commit time
Failed to load latest commit information.
ami Add fall through for when git repo is deleted Oct 9, 2018

Defensive (Hardening, Security Assessment, Inventory)


Continuous Security Auditing:


Development Security:

S3 Buckets Auditing:


  • - flAWS challenge to learn through a series of levels about common mistakes and gotchas when using AWS
  • - flAWS 2 has two paths this time: Attacker and Defender! In the Attacker path, you'll exploit your way through misconfigurations in serverless (Lambda) and containers (ECS Fargate). In the Defender path, that target is now viewed as the victim and you'll work as an incident responder for that same app, understanding how an attack happened.
  • - Vulnerable by Design AWS infrastructure setup tool
  • - Damn Vulnerable Cloud Application more info
  • - Scripts and templates to generate some basic detections of the AWS security services
  • OWASP ServerlessGoat - OWASP ServerlessGoat is a deliberately insecure realistic AWS Lambda serverless application, maintained by OWASP for educational purposes. Single click installation through the AWS Serverless Application Repository.



You can’t perform that action at this time.