Virtual machines
Drives
Reconnaissance
Enumeration
Web applications
APIs
Cloud
Static analysis
Disassemblers
Debuggers
Decompilers
Program editing tools
Analysis automation programming
Exploitation tools
Exploit development
Assemblers
Compilers
Steganography
Social engineering
Additional hardware
Network
Wireless
Mobile devices
Data exfiltration
Cryptanalysis
Threat analysis
Vulnerability management
Network traffic analysis
Endpoint detection and response
Security information and event management
Digital forensics and incident response
Phishing analysis
Malware analysis
Notes on tools used for security testing cloud applications, and experimenting with new tools.
Assess the strength of the security controls in place.
CloudSploit
AWS tools
Azure tools
GCP tools
truffleHog
Gitleaks
PACU
MSOLSpray
ScoutSuite
CloudCustodian
Bloodhound