Frichetten / SneakyEndpoints

Related projects ⓘ

Alternatives and complementary repositories for SneakyEndpoints

• stephenbradshaw / aws_url_signer
  POC tool to create signed AWS API GET requests to bypass Guard Duty alerting of off-instance credential use via SSRF
  ☆58Updated last year
• 0xd4y / AWSealion
  A tool to keep AWS pentests and red teams efficient, organized, and stealthy.
  ☆89Updated 7 months ago
• righteousgambit / quiet-riot
  Unauthenticated enumeration of AWS, Azure, and GCP Principals
  ☆202Updated 3 months ago
• StateFarmIns / LambdaLooter
  This application was built to help reduce the amount of time it takes to review AWS Lambda code.
  ☆60Updated 4 months ago
• iknowjason / edge
  Recon tool for cloud provider attribution. Supports AWS, Azure, Google, Cloudflare, and Digital Ocean.
  ☆159Updated last week
• SygniaLabs / security-cloud-scout
  ☆133Updated last year
• plerionhq / conditional-love
  An AWS metadata enumeration tool by Plerion
  ☆76Updated 8 months ago
• NetSPI / aws_consoler
  A utility to convert your AWS CLI credentials into AWS console access.
  ☆218Updated 4 years ago
• WithSecureLabs / cloud-wiki
  A public cloud security knowledgebase - https://www.secwiki.cloud/
  ☆48Updated 8 months ago
• RhinoSecurityLabs / IAMActionHunter
  An AWS IAM policy statement parser and query tool.
  ☆156Updated 8 months ago
• XMCyber / XMGoat
  ☆168Updated last year
• grahamhelton / IMDSpoof
  IMDSPOOF is a cyber deception tool that spoofs the AWS IMDS service to return HoneyTokens that can be alerted on.
  ☆92Updated 11 months ago
• shabarkin / aws-enumerator
  The AWS Enumerator was created for service enumeration and info dumping for investigations of penetration testers during Black-Box testin…
  ☆181Updated 2 years ago
• WeAreCloudar / s3-account-search
  S3 Account Search
  ☆245Updated 3 weeks ago
• grines / scour
  ☆125Updated 3 months ago
• PaloAltoNetworks / IAM-Deescalate
  IAM-Deescalate helps mitigate privilege escalation risk in AWS identity and access management (IAM)
  ☆96Updated 2 years ago
• padok-team / cognito-scanner
  A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
  ☆100Updated 8 months ago
• DataDog / undocumented-aws-api-hunter
  A tool to uncover undocumented APIs from the AWS Console.
  ☆80Updated last month
• saw-your-packet / CloudShovel
  A tool for scanning public or private AMIs for sensitive files and secrets. The tool follows the research made on AWS CloudQuarry where w…
  ☆82Updated last month
• AbstractClass / CloudPrivs
  Determine privileges from cloud credentials via brute-force testing.
  ☆64Updated 2 months ago
• prisma-cloud / IAMFinder
  IAMFinder enumerates and finds users and IAM roles in a target AWS account.
  ☆109Updated 3 years ago
• NetSPI / gcpwn
  Enumeration/exploit/analysis/download/etc pentesting framework for GCP; modeled like Pacu for AWS; a product of numerous hours via @Webbi…
  ☆206Updated 2 months ago
• unknownhad / CloudIntel
  This repo contains IOC, malware and malware analysis associated with Public cloud
  ☆244Updated this week
• carlospolop / aws_iam_review
  ☆31Updated 4 months ago
• vectra-ai-research / derf
  DeRF (Detection Replay Framework) is an "Attacks As A Service" framework, allowing the emulation of offensive techniques and generation o…
  ☆82Updated 9 months ago
• zmallen / cloudtrail2sightings
  Convert cloudtrail data to MITRE ATT&CK Sightings
  ☆79Updated 2 years ago
• hotnops / apeman
  AWS Attack Path Management Tool - Walking on the Moon
  ☆221Updated last week
• jstawinski / GitHub-Actions-Attack-Diagram
  ☆151Updated 2 months ago
• hac01 / gcp-iam-brute
  ☆40Updated 4 months ago
• ayushpriya10 / IMDShift
  ☆55Updated last year