cloudgoat
Vulnerable Cloud Simulator
An AWS deployment tool designed to provide intentionally vulnerable cloud infrastructure for hands-on learning and penetration testing.
CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
3k stars
74 watching
630 forks
Language: Python
last commit: almost 2 years agoLinked from 6 awesome lists
qazbnm456/awesome-web-security
infoslack/awesome-web-hacking
4ndersonlin/awesome-cloud-security
teamssix/awesome-cloud-security
vavkamil/awesome-vulnerable-apps
funkmyster/awesome-cloud-securityRelated projects:
| Repository | Description | Stars |
|---|---|---|
 ine-labs/azuregoat | A vulnerable Azure infrastructure simulator used to demonstrate and practice cloud security vulnerabilities | 801 |
| rhinosecuritylabs/ccat | A tool designed to test the security of container environments by simulating various attacks and vulnerabilities. | 595 |
 bridgecrewio/terragoat | A training project that demonstrates how common configuration errors can be introduced into cloud infrastructure to test secure development best practices | 1,159 |
 tenable/cnappgoat | A tool for creating and managing vulnerable environments in cloud computing platforms. | 269 |
| rhinosecuritylabs/cloud-security-research | Publishing research findings on cloud security vulnerabilities and exploitation techniques | 358 |
 owasp/webgoat.net | A penetration testing tool designed to simulate real-world web application vulnerabilities. | 69 |
| ine-labs/gcpgoat | A vulnerable cloud infrastructure demonstrating common web application security risks and misconfigurations | 364 |
 hxsecurity/terraformgoat | A multi-cloud deployment tool designed to test and demonstrate the vulnerability of cloud infrastructure configurations | 541 |
| owasp/iotgoat | A deliberately insecure firmware designed to test common vulnerabilities in IoT devices | 717 |
| bridgecrewio/cfngoat | A training project demonstrating how common configuration errors can lead to production cloud environment issues | 92 |
 jerryhoff/webgoat.net | An educational web application designed to demonstrate common web security flaws and their countermeasures. | 226 |
| owasp/nodegoat | An environment to learn about OWASP Top 10 security risks in Node.js web applications | 1,895 |
 scriptingxss/iotgoat | A deliberately insecure firmware project designed to test common IoT vulnerabilities | 181 |
| rhinosecuritylabs/pacu | An AWS exploitation framework designed to test the security of Amazon Web Services environments | 4,422 |
 metarget/metarget | A framework for automating the construction of vulnerable cloud-native infrastructure | 1,113 |