# Tools

## ScoutSuite :&#x20;

Open source multi-cloud security-auditing tool enables security posture assessment of cloud environments and Calle cloud configuration review.&#x20;

## pacu :&#x20;

Open-source AWS exploitation framework, designed for offensive security testing against cloud environments.&#x20;

## Cloud\_enum :&#x20;

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.&#x20;

## IAM\_enumerate :&#x20;

The tool used to Brute force AWS API calls allowed by the IAM policy&#x20;

## BF\_AWS\_Permissions :&#x20;

Brute Force AWS Permissions&#x20;

## CloudGrappler :&#x20;

It is a purpose-built tool designed for effortless querying of high-fidelity and single-event detections related to well-known threat actors in popular cloud environments such as AWS and Azure&#x20;

## Cloudsplaining :&#x20;

AWS IAM Security Assessment tool that identifies violations of least privilege
