CloudMapper Logo

CloudMapper

0
Free
Visit Website

CloudMapper helps you analyze your Amazon Web Services (AWS) environments. It now contains much more functionality, including auditing for security issues. Commands: * audit: Check for potential misconfigurations. * collect: Collect metadata about an account. * find_admins: Look at IAM policies to identify admin users and roles, or principals with specific privileges. * find_unused: Look for unused resources in the account. Finds unused Security Groups, Elastic IPs, network interfaces, volumes and elastic load balancers. * prepare/webserver: See Network Visualizations * public: Find public hosts and port ranges. * sg_ips: Get geoip info on CIDRs trusted in Security Groups. * stats: Show counts of resources for accounts. * weboftrust: Show Web Of Trust.

FEATURES

ALTERNATIVES

Automated script for creating a vulnerable Azure cloud lab to train offensive security skills.

A CLI tool and Go library for generating a Software Bill of Materials (SBOM) from container images and filesystems.

AWS Scout2 is a security tool for AWS administrators to assess their environment's security posture.

Cloud Security Suite (cs-suite) - Version 3.0 Usage for cloud security audits on AWS, GCP, Azure, and DigitalOcean.

A tool for spinning up insecure AWS infrastructure with Terraform for training and security assessment purposes.

Centrally Manage Cloud Firewall Rules with AWS Firewall Manager

Docker's Actuary automates security best-practices checks for Docker containers.

Exploit that launches a process on the host from within a Docker container run with the --privileged flag by abusing the Linux cgroup v1 “notification on release” feature.