aws_public_ips

awspublicips Table of Contents What's it for Quick start CLI reference Configuration IAM permissions Changelog Contributing Getting in touch What's it for awspublicips is a tool to fetch all public IP addresses both IPv4/IPv6 associated with an AWS account. It can be used as a library and as a CL...

cliam

cliam Multi cloud iam permissions enumeration tool. Currently covers: AWS GCP Azure Oracle 🚧 WIP Description Cliam is a simple cloud permissions identifier. There are two main components to the CLI. Most of the enumerated permissions are list, describe or get permissions. enumerate which can be...

cliam

cliam 多云 IAM 权限枚举工具。目前支持： AWS GCP Azure Oracle 🚧 开发中 描述 Cliam 是一个简单的云权限识别工具。CLI 包含两个主要组件。枚举的权限大多是 list、describe 或 get 权限。 enumerate 用于枚举特定权限（推荐） 某些服务提供商拥有服务组，可以检查特定服务/资源子集的权限。 安装 下载最新发布版。DEV 标签表示当前版本但不稳定。 若要在本地构建二进制文件，请进入 cli 目录并运行 make dev 用法 Cliam 通过服务常用的环境变量或从 CLI 传递常用标志来使用凭证。...

GCPBucketBrute

GCPBucketBrute 一个枚举 Google 存储桶、确定您对它们的访问权限以及判断是否可以权限提升的脚本。 此脚本（可选）接受 GCP 用户/服务账号凭据和一个关键词。 然后，将根据该关键词生成一系列排列组合，并使用这些组合扫描 Google 存储桶名称是否存在。 如果提供了凭据，大部分枚举仍将以未认证方式执行，但对于任何通过未认证枚举发现的存储桶，它将尝试使用提供的凭据通过 TestIamPermissions API 枚举存储桶权限。这将有助于找到在认证状态下可访问但未认证状态下无法访问的存储桶。 无论是否提供凭据，脚本都会尝试在未认证状态下使用...

S3-Account-Search - S3 Account Search

This tool lets you find the account id an S3 bucket belongs too. For this to work you need to have at least one of these permissions: Permission to download a known file from the bucket s3:getObject. Permission to list the contents of the bucket s3:ListBucket. Additionally, you will need a role...

Dufflebag - Search Exposed EBS Volumes For Secrets

Dufflebag is a tool that searches through public Elastic Block Storage EBS snapshots for secrets that may have been accidentally left in. You may be surprised by all the passwords and secrets just laying around! The tool is organized as an Elastic Beanstalk "EB", not to be confused with EBS...

PMapper - A Tool For Quickly Evaluating IAM Permissions In AWS

A project to speed up the process of reviewing an AWS account's IAM configuration. Purpose The goal of the AWS IAM auth system is to apply and enforce access controls on actions and resources in AWS. This tool helps identify if the policies in place will accomplish the intents of the account's...

Repokid - AWS Least Privilege For Distributed, High-Velocity Deployment

Repokid uses Access Advisor provided by Aardvark to remove permissions granting access to unused services from the inline policies of IAM roles in an AWS account. Getting Started Install mkvirtualenv repokid git clone [email protected]:Netflix/repokid.git cd repokid python setup.py develop...

CVE-2016-8520: Undefined Security Weakness

HPE Helion Eucalyptus v4.3.0 and earlier does not correctly check IAM user's permissions for accessing versioned objects and ACLs. In some cases, authenticated users with S3 permissions could also access versioned data...