ustayready/Thunderstorm

A collector and derivation engine. It maps your environment, evaluates effective permissions and trust, and writes a complete attack graph as a single .rage.ndjson file. The input to everything else.

SecurityHTML

1.0 Cooling Magnitude out of 10. Star growth looks organic. Data as of September 18, 2026.

Open on Seismograph Open on GitHub

About the project

Cloud security analysis tool: collects read-only data from AWS/Azure/GCP environments, models permissions and trust as a graph, and outputs a complete attack graph as a single .rage.ndjson file.

Useful for

Build an attack graph for an AWS account and find the shortest path from a public S3 bucket to the production database
Check Azure privilege-escalation chains via a public blob and a leaked service-principal secret
View the offline Blaze Lite HTML report with attack paths and confirmed credential leaks

README summarized by DeepSeek V4.1 Flash. Details may be inaccurate.

Why it’s trending

The spike has held for 2 days in a row — not a one-off blip.
The repository is 4 days old and already has 72 stars.
Top new repositories this week: #173.

Stars per day

Bars are daily stars, the line is the usual pace. Red marks spike days.

Numbers

Total stars: 72
Stars in a day: 0
Forks: 5
Issues and pull requests: 0
Watchers: 0
Language: HTML
Created: September 14, 2026
Last push: September 15, 2026

Star trust

Growth looks organic: forks and discussion are in line with active projects, and stars arrive unevenly, the way people give them.

These are heuristics, not a verdict: we judge by the repository’s behavior, not by a list of stargazers.

Spotted in

September 18, 2026Top new repositories this week: #118
September 17, 2026Top new repositories this week: #139
September 16, 2026Top new repositories this week: #199

README badge

Paste it into your README — the badge shows the current magnitude and links to this page.

[![Seismograph](https://gitnova.dev/badge/ustayready/Thunderstorm.svg?lang=en)](https://gitnova.dev/en/r/ustayready/Thunderstorm)

Similar projects

9.7
cloudflare/security-audit-skill
A coding-agent skill that turns the agent into a security auditor, running a multi-phase code audit with independently verified, machine-readable findings.

BreakoutSecurityJavaScript+2,407 stars in a day
6.6
yynxxxxx/gpt_sub_analysis
A guide to analyzing the ChatGPT iOS subscription flow: it describes intercepting the buyProduct request via Reqable and SSL Kill Switch 3 and rewriting the offerName and salableAdamId fields to obtain the Pro 20x…

Early signalSecurity+137 stars in a day
5.8
ctdal/cve-2026-41940-PoC
PoC exploit for CVE-2026-41940, a critical authentication bypass in cPanel & WHM (CVSS 10.0) that grants unauthenticated root-level WHM access by injecting CRLF sequences into server-side session files.

Early signalSecurityPython+49 stars in a day
5.3
BennyThink/NFCX
Cross-platform GUI desktop app for NFC card work: reader discovery, MIFARE Classic reads, dumps, key management, and key recovery. For cards you own or are authorized to test.

Early signalSecurityGo+30 stars in a day
4.9
NationalSecurityAgency/ghidra
A software reverse engineering framework from the NSA: disassembly, decompilation, graphing and scripting for analyzing compiled code on Windows, macOS and Linux.

BreakoutSecurityJava+246 stars in a day
4.6
shinthink/blitzstrike
A TypeScript/Bun MCP server packaging a pentest methodology into three tiers: attack-surface reconnaissance, source-to-sink tracing, and live validation of findings before reporting.

Early signalSecurityTypeScript+20 stars in a day