talbeerysec / STS-token-decoder
AWS STS token decoder
☆37Updated 5 months ago
Alternatives and similar repositories for STS-token-decoder:
Users that are interested in STS-token-decoder are comparing it to the libraries listed below
- Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts☆60Updated last year
- A toolset to juggle AWS roles for persistent access☆53Updated 5 months ago
- ☆30Updated 2 months ago
- Utility for downloading and mounting EBS snapshots using the EBS Direct API's☆80Updated last year
- This terraform provider can be used to get remote code execution by injecting a dummy resource in a writeable state file.☆50Updated last month
- An AWS metadata enumeration tool by Plerion☆83Updated 11 months ago
- AWSXenos will list all the trust relationships in all the IAM roles, S3 buckets, and more☆61Updated last week
- An implementation of infrastructure-as-code scanning using dynamic tooling.☆56Updated 3 years ago
- Repository to archive AWS Documentation for local use☆41Updated 3 months ago
- This application was built to help reduce the amount of time it takes to review AWS Lambda code.☆60Updated 2 months ago
- WAF bypass PoC☆45Updated last year
- Determine privileges from cloud credentials via brute-force testing.☆64Updated 4 months ago
- IAM-Deescalate helps mitigate privilege escalation risk in AWS identity and access management (IAM)☆96Updated 2 years ago
- ☆124Updated 6 months ago
- Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.☆39Updated last year
- A PoC to Simulate Ransomware Attack on AWS Environment☆29Updated 3 months ago
- The Jolly Executioner - a simple command execution proxy☆16Updated 7 months ago
- ☆39Updated 7 months ago
- POC tool to create signed AWS API GET requests to bypass Guard Duty alerting of off-instance credential use via SSRF☆58Updated last year
- Hide from the InstanceCredentialExfiltration GuardDuty finding by using VPC Endpoints☆113Updated last year
- ☆41Updated last week
- ☆46Updated 2 months ago
- A tool for quickly evaluating IAM permissions in AWS.☆72Updated 7 months ago
- Sniff and attack networks that use IP-in-IP or VXLAN encapsulation protocols.☆21Updated 4 months ago
- AWS SSO serverless phishing API.☆31Updated 3 years ago
- HashiCorp-relevant rules for the Semgrep code analysis tool☆38Updated last year
- Protect against subdomain takeover☆92Updated 7 months ago
- A meta-database collecting resources that compile lists of breaches☆18Updated 2 months ago
- ☆28Updated 3 years ago
- Serverless honeytoken 🕵🏻♂️☆79Updated 2 years ago