CloudGoat
CloudGoat is a vulnerable-by-design AWS deployment tool developed by Rhino Security Labs for cloud security training and skill development. The tool creates intentionally vulnerable AWS environments that simulate real-world cloud security scenarios through capture-the-flag style challenges. Users can deploy various AWS resources configured with security weaknesses to practice identifying and exploiting cloud misconfigurations. CloudGoat offers structured learning experiences with scenarios ranging from beginner to advanced difficulty levels. Each scenario provides multiple attack paths and solution approaches, allowing users to explore different exploitation techniques within controlled AWS environments. The tool includes comprehensive documentation and guidance to support the learning process. It enables security professionals, penetration testers, and students to develop practical cloud security skills by working with realistic vulnerable infrastructure deployments. CloudGoat scenarios cover various AWS services and common cloud security issues, providing hands-on experience with cloud penetration testing methodologies and attack vectors specific to Amazon Web Services environments.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
A collection of Python scripts for password spraying attacks against Lync/S4B & OWA, featuring Atomizer, Vaporizer, Aerosol, and Spindrift tools.
SharpEDRChecker scans system components to detect security products and tools.
SauronEye helps in identifying files containing sensitive data such as passwords through targeted directory searches.
PyBOF is a Python library that enables in-memory loading and execution of Beacon Object Files (BOFs) with support for argument passing and function targeting.
An Azure Function that validates and relays Cobalt Strike beacon traffic based on Malleable C2 profile authentication.
SharpPrinter enables efficient discovery of network printers for security and management purposes.
Parrot Security OS is a comprehensive, secure, and customizable operating system for cybersecurity professionals, offering over 600+ tools and utilities for red and blue team operations.
A digital archive of the internet, allowing users to capture and browse archived web pages.
PINNED
A cybersecurity platform that offers vulnerability scanning, Windows Defender and 3rd party AV management, and MFA compliance reporting, among other features.
Proton Pass is a cross-platform password manager that provides encrypted storage, password generation, and security monitoring features with integrated 2FA and dark web monitoring capabilities.
NordVPN is a commercial VPN service that encrypts internet connections and hides IP addresses through a global network of servers, featuring integrated threat protection and multi-device support.
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.