Kubestriker Kubestriker performs numerous in depth checks on kubernetes infra to identify the security misconfigurations and challenges that devops engineers/developers are likely to encounter when using Kubernetes, especially in production and at scale. kubestriker is Platform agnostic and works equally well across more than one platform such as self hosted kubernetes, Amazon EKS, Azure AKS, Google GKE etc. How To Install Clone the repo and install To install this tool or clone and run this application, you’ll need Git, python3 […]

Scout Suite Scout Suite is an open source multi-cloud security-auditing tool, which enables security posture assessment of cloud environments. Using the APIs exposed by cloud providers, Scout Suite gathers configuration data for manual inspection and highlights risk areas. Rather than going through dozens of pages on the web consoles, Scout Suite presents a clear view of the attack surface automatically. Scout Suite was designed by security consultants/auditors. It is meant to provide a point-in-time security-oriented view of the cloud account […]

Py365 A collection of scripts for finding threats in Office365. Prerequisities This tool requires Reqeusts, Requests-cache and Jinja2 – these can be installed with pip install -r requirements.txtIt requires an administrative access to AzureAD & Office365 environment to set up but no specific account is required for its continued use.You will need to create a new application registration in the AzureAD portal and grant it the following permissions at the application level and grant admin consent for them: Microsoft Graph […]