Cloud Commotion intends to cause chaos to simulate security incidents

Blogpost series showcasing interesting cloud - web app security bugs

HashiCorp-relevant rules for the Semgrep code analysis tool

Offensive Terraform module which creates Kali Linux from the AWS marketplace and installs cloud security tools (Pacu, Cloudsplaining, ScoutSuite).

Offensive Terraform module which creates EC2 instance and reverse shell from an EC2 instance to attacker machine.

Offensive Terraform module which creates Lambda function with existing IAM role. The module invokes it automatically to exfiltrate AWS temporary credential from environment variables and send it ba…

Offensive Terraform module which takes over a subdomain which has a CNAME record pointing to non-existing S3 bucket in target's Route53. The module creates a S3 bucket with a name as subdomain in t…