awsEnum

awsEnum Enumrate AWS services! with no nosies awsEnum is a python script enumrate AWS services through the provided credential. :book: Table of Contents Table of Contents 1. Screenshot 2. Disclaimer 3. Features 4. Prerequisites 5. How to Install 6. Results and FQAs 7. To-Do :clapper: Screenshot...

phishlulz

PhishLulz PhishLulz is a Ruby toolset aimed at automating Phishing activities. When you start a phishing campaign, a dedicated Amazon EC2 Debian 7 instance is spawned. The VM comes with various open source tools that have been glued together. The two main components are: PhishingFrenzy...

Browser-ExternalC2

Browser-EC2...

cloudsplaining

Cloudsplaining Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized HTML report. Example report...

barq

barq barq: The AWS Cloud Post Exploitation framework! What is it? barq is a post-exploitation framework that allows you to easily perform attacks on a running AWS infrastructure. It allows you to attack running EC2 instances without having the original instance SSH keypairs. It also allows you to...

aws_public_ips

awspublicips...

red-detector

Red-Detector Description Scan your EC2 instance to find its vulnerabilities using Vuls https://vuls.io/en/. Audit your EC2 instance to find security misconfigurations using Lynis https://cisofy.com/solutions/lynis. Scan your EC2 instance for signs of a rootkit using Chkrootkit...

chameleon

19 Customizable honeypots for monitoring network traffic, bots activities, and username\password credentials DNS, HTTP Proxy, HTTP, HTTPS, SSH, POP3, IMAP, STMP, RDP, VNC, SMB, SOCKS5, Redis, TELNET, Postgres, MySQL, MSSQL, Elastic and ldap If you want to implement the honeypots in your project,...

sisu

sisu ⚡ Your AWS, as a filesystem. This: root@kitploit: grep -l "AdministratorAccess" iam/users//policies.json Instead of this: root@kitploit: aws iam list-users --query 'Users.UserName' --output text | \ xargs -I sh -c 'aws iam list-attached-user-policies --user-name --query...

Ninja

Quick Update to include Follina Exploitation 01/06/2022 - NinjaC2 will generate the document and serve the HTML payload . More information : https://www.linkedin.com/posts/ahmed-khlief-499321a7i-just-pushed-a-quick-update-to-ninjac2-to-activity-6937661951007170560-Tmps Ninja V2.2 Released...

Zeus

Zeus AWS 監査 & 強化ツール Zeus は、AWS EC2 / S3 / CloudTrail / CloudWatch / KMS のベストプラクティス強化のための強力なツールです。ユーザーが作成したプロファイルに従ってセキュリティ設定をチェックし、ユーザーの要求に応じて CIS AWS Benchmark ソースに基づいた推奨設定に変更します。 現在はログメカニズムのみを含んでいます。 Identity and Access Management 「root」アカウントの使用を避ける すべての IAM ユーザーにコンソールパスワードがある場合は多要素認証 MFA を有効にす...

aws-security-assessment-solution

Self-Service Security Assessment Solutions v2.0 Cybersecurity remains a very important topic and point of concern for many CIOs, CISOs, and their customers. To meet these important concerns, AWS has developed a primary set of services customers should use to aid in protecting their accounts. Amaz...

autovpn

!CAUTION This repository is no longer being maintained. No further updates, bug fixes, or support will be provided. Please use the new version https://github.com/ttlequals0/autowire Overview Script that allows the easy creation of OpenVPN endpoints in any AWS region. To create a VPN endpoint is...

autovpn

!CAUTION このリポジトリはメンテナンスされなくなりました。今後のアップデート、バグ修正、サポートは提供されません。 新しいバージョン https://github.com/ttlequals0/autowire を使用してください。 概要...

aws_pwn

AWS pwn Summary This is a collection of horribly written scripts for performing various tasks related to penetration testing AWS. Please don't be sad if it doesn't work for you. It might be that AWS has changed since a given tool was written or it might be that the code sux. Either way, please fe...

Taken

Taken Takeover subdomains using AWS dangling elastic ips and have a working POC for Subdomain Takeover. What all you can do with Subdomain Takeover - Cookies stealing, If cookies are set with domain attribute set to the hijacked subdomain. CORS request, If Access-Control-Allow-Origin is set to...

cloud

Cloud クラウド環境の監視 このプロジェクトの使命は、主要なクラウドサービスプロバイダーごとに、常に最新で自由にアクセス可能なクラウド環境のマップを提供することです。 私たちは、セキュリティ研究者にとっての価値を考慮し、まずはAWS EC2とGCPマシンのSSL証明書データを収集することから始めることにしました。ただし、近い将来、より多くのデータとプロバイダーを含むようにプロジェクトを拡大する予定です。皆様のご意見やご提案は非常に貴重ですので、Twitter または Discord までお気軽にお知らせください。次に優先すべき分野について教えてください。...

meltdown-aws-scanner

meltdown-aws-scanner Naive shell script to verify Meltdown CVE-2017-5754 patch status of EC2 instances Requirements aws cli with working configuration Using the script Scan all EC2 instances in default account and region root@kitploit: $ ./checkmeltdown.sh | tee $date '+%Y-%m-%d'.csv Scan a subse...

c2-cloud

About The Project The C2 Cloud is a robust web-based C2 framework, designed to simplify the life of penetration testers. It allows easy access to compromised backdoors, just like accessing an EC2 instance in the AWS cloud. It can manage several simultaneous backdoor sessions with a user-friendly...

poro

poro Description Scan for publicly accessible assets on your AWS environment Services covered by this tool: AWS ELB API Gateway S3 Buckets RDS Databases EC2 instances Redshift Databases Poro also check if a tag you specify is applied to identified public resources using --tag-key and --tag-value...