From 54b63bf979d37c217f1b91e9497bcd6cb696b0e9 Mon Sep 17 00:00:00 2001 From: Oliver Zimmermann Date: Tue, 30 Dec 2025 13:50:46 +0100 Subject: [PATCH 1/2] Add s3dns to cloud security tools list --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 8b2df4f..e9b4145 100644 --- a/README.md +++ b/README.md @@ -82,6 +82,7 @@ A curated list of awesome cloud security related resources. * [Terrascan](https://github.com/accurics/terrascan): Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure. * [tfsec](https://github.com/liamg/tfsec): Static analysis powered security scanner for Terraform code. * [Zeus](https://github.com/DenizParlak/Zeus): AWS Auditing & Hardening Tool. +* [s3dns](https://github.com/olizimmermann/s3dns) - Passive DNS-based discovery of S3 (and other cloud) buckets by resolving CNAMEs and IPs during recon—ideal for stealthy and early identification of cloud storage exposures ## Container * [auditkube](https://github.com/opszero/auditkube): Audit for for EKS, AKS and GKE for HIPAA/PCI/SOC2 compliance and cloud security. From 6f5cd8ad7f99d351e68d0d3e65abf642e7809537 Mon Sep 17 00:00:00 2001 From: Oliver Zimmermann Date: Sat, 21 Mar 2026 13:53:23 +0100 Subject: [PATCH 2/2] Update README.md --- README.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index e9b4145..930b82c 100644 --- a/README.md +++ b/README.md @@ -74,6 +74,7 @@ A curated list of awesome cloud security related resources. * [pacu](https://github.com/RhinoSecurityLabs/pacu): The AWS exploitation framework. * [PMapper](https://github.com/nccgroup/PMapper): A tool for quickly evaluating IAM permissions in AWS. * [Prowler](https://github.com/toniblyx/prowler): Command line tool for AWS Security Best Practices Assessment, Auditing, Hardening and Forensics Readiness Tool. +* [s3dns](https://github.com/olizimmermann/s3dns): Passive DNS-based discovery of S3 (and other cloud) buckets by resolving CNAMEs and IPs during recon—ideal for stealthy and early identification of cloud storage exposures * [ScoutSuite](https://github.com/nccgroup/ScoutSuite): Multi-cloud security auditing tool. * [Security Monkey](https://github.com/Netflix/security_monkey): Monitors AWS, GCP, OpenStack, and GitHub orgs for assets and their changes over time. * [SkyWrapper](https://github.com/cyberark/SkyWrapper): Tool helps to discover suspicious creation forms and uses of temporary tokens in AWS. @@ -82,7 +83,7 @@ A curated list of awesome cloud security related resources. * [Terrascan](https://github.com/accurics/terrascan): Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure. * [tfsec](https://github.com/liamg/tfsec): Static analysis powered security scanner for Terraform code. * [Zeus](https://github.com/DenizParlak/Zeus): AWS Auditing & Hardening Tool. -* [s3dns](https://github.com/olizimmermann/s3dns) - Passive DNS-based discovery of S3 (and other cloud) buckets by resolving CNAMEs and IPs during recon—ideal for stealthy and early identification of cloud storage exposures + ## Container * [auditkube](https://github.com/opszero/auditkube): Audit for for EKS, AKS and GKE for HIPAA/PCI/SOC2 compliance and cloud security.