> cat /dev/github | grep security-tools
discovered 03 Aug 2026

ThunderCloud

via awesome-list
→ View on GitHub
ThunderCloud is a cloud exploit framework designed for penetration testing of AWS and Azure environments. It features modules for enumerating roles, extracting credentials from vulnerable Cognito endpoints, attacking S3 buckets, and phishing AWS SSO credentials. This tool facilitates various attacks, making it valuable for security professionals assessing cloud infrastructure vulnerabilities.