SpenGietz / endgame-1
An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share the resources with the entire internet 😈
☆13Updated 4 years ago
Alternatives and similar repositories for endgame-1
Users that are interested in endgame-1 are comparing it to the libraries listed below
Sorting:
- Manage GuardDuty At Enterprise Scale☆22Updated 4 years ago
- Updated incident response generator for training classes☆44Updated 3 years ago
- Lightspin AWS IAM Vulnerability Scanner☆96Updated 4 years ago
- Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 (IMDSv2).☆143Updated 2 weeks ago
- Generates runbooks for GuardDuty findings☆35Updated 10 months ago
- AWSXenos will list all the trust relationships in all the IAM roles, S3 buckets, and more☆62Updated 2 months ago
- 'Continuous' AWS perimeter monitoring: Periodically scan internet facing AWS resources to detect misconfigured services.☆64Updated 5 years ago
- A Lambda-powered Security Orchestration framework for AWS GuardDuty☆52Updated 5 years ago
- A toolset to juggle AWS roles for persistent access☆57Updated 9 months ago
- IAMFinder enumerates and finds users and IAM roles in a target AWS account.☆111Updated 4 years ago
- ☆29Updated 6 months ago
- Tools for AWS forensics☆63Updated 9 years ago
- Deliberately vulnerable AWS resources for security assessment demos☆31Updated 2 years ago
- AWSATT&CK adds MITRE ATT&CK context and additional logging capabilities to Rhino Security Labs's open-source AWS exploitation framework, …☆45Updated 4 years ago
- Assess certain AWS network configurations☆12Updated 6 years ago
- SyntheticSun is a defense-in-depth security automation and monitoring framework which utilizes threat intelligence, machine learning, man…☆78Updated 3 years ago
- Offensive Terraform Website☆44Updated 4 years ago
- This command line tool counts the number of resources in different categories across Amazon regions.☆59Updated 5 years ago
- Listing of resources for example AWS Service Control Policies (SCPs)☆17Updated last year
- Scripts to quickly fix security and compliance issues☆26Updated last year
- Identify all permitted data paths originating from the Internet to Network Interfaces within AWS Accounts across the entire AWS Organizat…☆39Updated last year
- TrailAlerts is a AWS-native, serverless cloud-detection tool that lets you define simple rules as code and get rich alerts about events i…☆36Updated last week
- Convert cloudtrail data to MITRE ATT&CK Sightings☆80Updated 2 years ago
- Scan your EC2 instance to find its vulnerabilities using Vuls (https://vuls.io/en/)☆88Updated 2 years ago
- CloudSplaining on AWS Managed Policies☆43Updated this week
- Scan publicly accessible assets on your AWS cloud environment☆139Updated 11 months ago
- Compares and analyzes GCP IAM roles.☆77Updated 2 months ago
- Safer AWS SCP deployments via real-time monitoring☆51Updated last year
- Cloud Security Dashboard for AWS - based on ScoutSuite☆1Updated last year
- AWS docs, guides, and other tools☆76Updated 2 years ago