A list of useful payloads and bypass for Web Application Security and Pentest/CTF - swisskyrepo/PayloadsAllTheThings

A MITRE ATT&CK Navigator export for AWS GuardDuty Findings - amrandazz/attack-guardduty-navigator

Attack Range to test detection against nativel serverless cloud services and environments - splunk/attack_range_cloud

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report. - salesforce/cloudsplaining

Cartography is a Python tool that pulls infrastructure assets and their relationships into a Neo4j graph database. - cartography-cncf/cartography

👤 Identity and Access Management knowledge for cloud platforms - kdeldycke/awesome-iam

Security breaches in the cloud usually don’t exploit a single misconfiguration or vulnerability but rather a toxic combination of multiple issues that in isolation wouldn’t raise a red flag given the tons of alerts security teams already get. In this session…

Download the presentation here: https://drive.google.com/file/d/1mLkcXW8kGeVuoh8wWW3upj0e96CSN-Aw/view?usp=sharing

Top Threats to Cloud Computing: Egregious 11 publication: https://cloudsecurityalliance.org/artifacts/top-threats-egregious-11-deep-dive/
…

The complexity of the cloud technology landscape creates a perfect place for attackers to hide and can serve as an ideal launchpad for attacks. This year’s hot off the press CSA Top Threats report highlights the 11 most critical threats, risks and vulnerabilities…

🛡️ Awesome Cloud Security Resources ⚔️. Contribute to 4ndersonLin/awesome-cloud-security development by creating an account on GitHub.

Multicloud fluency — proficiency and certification in two major cloud providers (Google Cloud, AWS, Microsoft Azure) — can help your career.