PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Cloud 9: Top Cloud Penetration Testing Tools

bishopfox.com | blog | #cloud | #aws | #attack-surface | #security-tools | #cloud-pentesting | #scoutsuite | #pacu
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Nine favorite cloud penetration testing tools for 2022—including WeirdAAL, ScoutSuite, GitOops, Pacu, and S3Scanner—with notes on how each supports cloud attack surface assessments.
Published
Collected

Related coverage

blog · netspi.com
Pivoting Clouds in AWS Organizations – Part 2: Examining AWS Security Features and Tools for Enumeration
Part two of the AWS Organizations series shows how trusted access and delegated administration can be abused for pivoting, plus a new Pacu module for enumeration and defensive guidance.
blog · netspi.com
Overcome Cloud Security Challenges with Purpose-Built Cloud Penetration Testing
Outlines five cloud security challenges—shadow IT, attacker-defender resource asymmetry, catastrophic misconfigurations—and argues purpose-built cloud penetration testing is the way to address them.
blog · netspi.com
AWS versus Azure Cloud Testing: Understanding the Differences
Compares cloud penetration testing across AWS and Azure, explaining the shared responsibility model and why platform-specific nuances matter for methodology and cloud security maturity.
tool · github.com
Peach: Single-user, Local-first Personal Media Library and Management System
Offers a privacy-respecting, local-first alternative for media library indexing and playback, combining cloud-drive integration with automated scraping while keeping sensitive viewing data strictly local.
tool · github.com
Apple Private Cloud Compute (PCC) Security Source Code and Research Tools
Provides unprecedented source-level visibility into Apple's cloud AI infrastructure, allowing security researchers to verify cryptographic privacy guarantees and audit components eligible for Apple's PCC Security Bounty.
blog · bishopfox.com
9 Red Team Tools For a Successful Red Teaming Engagement
Nine red team tools from Bishop Fox: CursedChrome for browser hijacking, Universal Loader for cross-platform in-memory loading, Overlord for infrastructure automation, and Sliver's implant framework.
Back