Awesome AWS Security
Section: Tools of Trade · AWS Penetration Testing Toolkits
FreshScore 74
Entry
Pacu
Appears in 5 awesome lists
Open-source AWS exploitation framework designed for offensive security testing, allowing penetration testers to exploit configuration flaws within AWS accounts using modular attack modules including privilege escalation, IAM backdooring, and Lambda attacks.
Open github.comrhinosecuritylabs/pacu
Found in these lists
Awesome Connected Things Security
Section: AWS IoT Security
FreshScore 83
Awesome Privilege Escalation
Section: AWS · The AWS exploitation framework, designed for testing the security of Amazon Web Services environments. By RhinoSecurityLabs.
SlowScore 59
awesome-python
Section: Security Tools · The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
FreshScore 80
Hacking Tools
Section: Cloud Security · Open-source AWS exploitation framework designed for offensive security testing, allowing penetration testers to exploit configuration flaws within AWS accounts using modular attack modules including privilege escalation, IAM backdooring, and Lambda attacks.
FreshScore 91
Often listed next to it
PayloadsAllTheThings
An API key is a unique identifier that is used to authenticate requests associated with your project. Some developers might hardcode them or leave it on public shares.
In 13 listsDetails
Cynative
🟢 — Local AI security research agent for cloud, code, and runtime environments across GitHub, GitLab, AWS, GCP, Azure, and Kubernetes, with read-only action gates, sandboxed code execution, evidence-backed verification, and audit logs. · updated 2026-10-11); Related: Fraim · EscalateGPT
In 6 listsDetails
gitleaks
Zachary Rice - Gitleaks is a SAST tool for detecting hardcoded secrets like passwords, api keys, and tokens in git repositories.
In 5 listsDetails
ScoutSuite
Open source multi-cloud security-auditing tool, which enables security posture assessment of cloud environments.
In 5 listsDetails
S3Scanner
Cloud storage scanner for identifying exposed S3 buckets containing IoT firmware or configuration data.
In 4 listsDetails
AWS Tool Arsenal
List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
In 4 listsDetails
cloud-audit
Fast, opinionated AWS security scanner with 47 curated checks. Each finding includes copy-paste remediation in AWS CLI and Terraform. Features attack chain detection and a diff command for CI/CD pipeline gating.
In 4 lists
AWS Vault
A vault for securely storing and accessing AWS credentials in development environments
In 4 lists