GCPBucketBrute

GCPBucketBrute Ein Skript zur Aufzählung von Google Storage Buckets, um festzustellen, welchen Zugriff Sie darauf haben und ob eine Privilegienausweitung möglich ist. Dieses Skript akzeptiert optional GCP-Benutzer-/Dienstkonto-Anmeldedaten und ein Schlüsselwort. Dann wird aus diesem Schlüsselwort...

aws_public_ips

awspublicips...

cliam

cliam Multi cloud iam permissions enumeration tool. Currently covers: AWS GCP Azure Oracle 🚧 WIP Description Cliam is a simple cloud permissions identifier. There are two main components to the CLI. Most of the enumerated permissions are list, describe or get permissions. enumerate which can be...

cliam

cliam Multi-Cloud-IAM-Berechtigungs-Enumeration-Tool. Derzeit umfasst: AWS GCP Azure Oracle 🚧 In Bearbeitung Beschreibung Cliam ist ein einfacher Cloud-Berechtigungs-Identifikator. Das CLI besteht aus zwei Hauptkomponenten. Die meisten aufgezählten Berechtigungen sind List-, Describe- oder...

S3-Account-Search - S3 Account Search

This tool lets you find the account id an S3 bucket belongs too. For this to work you need to have at least one of these permissions: Permission to download a known file from the bucket s3:getObject. Permission to list the contents of the bucket s3:ListBucket. Additionally, you will need a role...

Dufflebag - Search Exposed EBS Volumes For Secrets

Dufflebag is a tool that searches through public Elastic Block Storage EBS snapshots for secrets that may have been accidentally left in. You may be surprised by all the passwords and secrets just laying around! The tool is organized as an Elastic Beanstalk "EB", not to be confused with EBS...

PMapper - A Tool For Quickly Evaluating IAM Permissions In AWS

A project to speed up the process of reviewing an AWS account's IAM configuration. Purpose The goal of the AWS IAM auth system is to apply and enforce access controls on actions and resources in AWS. This tool helps identify if the policies in place will accomplish the intents of the account's...

Repokid - AWS Least Privilege For Distributed, High-Velocity Deployment

Repokid uses Access Advisor provided by Aardvark to remove permissions granting access to unused services from the inline policies of IAM roles in an AWS account. Getting Started Install mkvirtualenv repokid git clone [email protected]:Netflix/repokid.git cd repokid python setup.py develop...