886 matches found
autovpn
!CAUTION This repository is no longer being maintained. No further updates, bug fixes, or support will be provided. Please use the new version https://github.com/ttlequals0/autowire Overview Script that allows the easy creation of OpenVPN endpoints in any AWS region. To create a VPN endpoint is...
cloudsplaining
Cloudsplaining Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized HTML report. Example report Documentation For full documentation, please visit the project on ReadTheDocs. Installation Cheatsheet Example report...
awsEnum
awsEnum Enumrate AWS services! with no nosies awsEnum is a python script enumrate AWS services through the provided credential. :book: Table of Contents Table of Contents 1. Screenshot 2. Disclaimer 3. Features 4. Prerequisites 5. How to Install 6. Results and FQAs 7. To-Do :clapper: Screenshot...
aws-security-assessment-solution
Self-Service Security Assessment Solutions v2.0 Cybersecurity remains a very important topic and point of concern for many CIOs, CISOs, and their customers. To meet these important concerns, AWS has developed a primary set of services customers should use to aid in protecting their accounts. Amaz...
Taken
Taken Takeover subdomains using AWS dangling elastic ips and have a working POC for Subdomain Takeover. What all you can do with Subdomain Takeover - Cookies stealing, If cookies are set with domain attribute set to the hijacked subdomain. CORS request, If Access-Control-Allow-Origin is set to...
aws_public_ips
awspublicips Table of Contents What's it for Quick start CLI reference Configuration IAM permissions Changelog Contributing Getting in touch What's it for awspublicips is a tool to fetch all public IP addresses both IPv4/IPv6 associated with an AWS account. It can be used as a library and as a CL...
poro
poro Description Scan for publicly accessible assets on your AWS environment Services covered by this tool: AWS ELB API Gateway S3 Buckets RDS Databases EC2 instances Redshift Databases Poro also check if a tag you specify is applied to identified public resources using --tag-key and --tag-value...
red-detector
Red-Detector Description Scan your EC2 instance to find its vulnerabilities using Vuls https://vuls.io/en/. Audit your EC2 instance to find security misconfigurations using Lynis https://cisofy.com/solutions/lynis. Scan your EC2 instance for signs of a rootkit using Chkrootkit...
red-detector
Red-Detector Description Scannez votre instance EC2 pour trouver ses vulnérabilités à l'aide de Vuls https://vuls.io/en/. Auditez votre instance EC2 pour trouver des erreurs de configuration de sécurité à l'aide de Lynis https://cisofy.com/solutions/lynis. Scannez votre instance EC2 pour détecter...
chameleon
19 Customizable honeypots for monitoring network traffic, bots activities, and username\password credentials DNS, HTTP Proxy, HTTP, HTTPS, SSH, POP3, IMAP, STMP, RDP, VNC, SMB, SOCKS5, Redis, TELNET, Postgres, MySQL, MSSQL, Elastic and ldap If you want to implement the honeypots in your project,...
cloud
Cloud Surveillance du paysage Cloud Notre mission avec ce projet est de fournir une carte toujours à jour et librement accessible du paysage cloud pour chaque grand fournisseur de services cloud. Nous avons décidé de commencer par collecter les données de certificats SSL des machines AWS EC2 et...
aws_pwn
AWS pwn Summary This is a collection of horribly written scripts for performing various tasks related to penetration testing AWS. Please don't be sad if it doesn't work for you. It might be that AWS has changed since a given tool was written or it might be that the code sux. Either way, please fe...
c2-cloud
About The Project The C2 Cloud is a robust web-based C2 framework, designed to simplify the life of penetration testers. It allows easy access to compromised backdoors, just like accessing an EC2 instance in the AWS cloud. It can manage several simultaneous backdoor sessions with a user-friendly...
phishlulz
PhishLulz PhishLulz is a Ruby toolset aimed at automating Phishing activities. When you start a phishing campaign, a dedicated Amazon EC2 Debian 7 instance is spawned. The VM comes with various open source tools that have been glued together. The two main components are: PhishingFrenzy...
phishlulz
PhishLulz PhishLulz est un ensemble d'outils Ruby conçu pour automatiser les activités de phishing. Lorsque vous lancez une campagne de phishing, une instance Amazon EC2 dédiée Debian 7 est créée. La machine virtuelle intègre divers outils open source qui ont été assemblés. Les deux composants...
Zeus
Zeus AWS Auditing & Hardening Tool Zeus is a powerful tool for AWS EC2 / S3 / CloudTrail / CloudWatch / KMS best hardening practices. It checks security settings according to the profiles the user creates and changes them to recommended settings based on the CIS AWS Benchmark source at request of...
sisu
sisu ⚡ Ваш AWS как файловая система. Вот так: grep -l "AdministratorAccess" iam/users//policies.json Вместо этого: aws iam list-users --query 'Users.UserName' --output text | \ xargs -I sh -c 'aws iam list-attached-user-policies --user-name --query "AttachedPolicies.PolicyArn" --output text' | ...
Ninja
Mise à jour rapide pour inclure l'exploitation Follina 01/06/2022 - NinjaC2 générera le document et servira la charge utile HTML. Plus d'informations : https://www.linkedin.com/posts/ahmed-khlief-499321a7i-just-pushed-a-quick-update-to-ninjac2-to-activity-6937661951007170560-Tmps Ninja V2.2 publi...
autovpn
!CAUTION Ce dépôt n'est plus maintenu. Aucune mise à jour, correction de bug ou assistance ne sera fournie. Veuillez utiliser la nouvelle version https://github.com/ttlequals0/autowire Aperçu Script permettant la création simple de points de terminaison OpenVPN dans n'importe quelle région AWS. L...