Serverless-Goat

Introduction Thank you for using OWASP ServerlessGoat! ​ This serverless application demonstrates common serverless security flaws as described in the Serverless Security Top 10 Weaknesses guide https://github.com/puresec/sas-top-10. ​ ServerlessGoat was created for the following educational...

s3-leaks

s3-leaks List of AWS S3 Leaks Feel free to send in a PR if you know of other leaks Date| Description| Notes ---|---|--- April 2025| Thoughts of AWS Access key ID's from an S3 bucket| The keys to the AWS kingdom March 2025| 16,000 subscribers to Nine newspapers from Australia| name, postal address...

slurp-1

slurp Blackbox/whitebox S3 bucket enumerator Overview Credit to all the vendor packages that made this tool possible. This is a security tool; it's meant for pen-testers and security professionals to perform audits of s3 buckets. Features Scan via domains; you can target a single domain or a list...

DVFaaS-Damn-Vulnerable-Functions-as-a-Service

DVFaaS - Damn Vulnerable Functions as a Service A DHIY Deploy and Hack It Yourself Project that you can deploy and run a bunch of 'orribly insecure functions on AWS Lambda Objective and Audiences We at we45 do a lot of training around Serverless Security, Cloud and security of modern web stacks. ...

CloudPrivs

CloudPrivs I got creds, now what? Overview CloudPrivs is a tool that leverages the existing power of SDKs like Boto3 to brute force privileges of all cloud services to determine what privileges exist for a given set of credentials. This tool is useful for Pentesters, Red Teamer's and other securi...

IAMActionHunter

Description IAMActionHunter is an IAM policy statement parser and query tool aims to simplify the process of collecting and understanding permission policy statements for users and roles in AWS Identity and Access Management IAM. Although its functionality is straightforward, this tool was...

aws-enumerator

AWS Service Enumeration Disclaimer The tool is in beta stage testing in progress, no destructive API Calls used read only actions . I hope, there will be no issues with the tool. If any issues encountered, please submit the ticket. Description The AWS Enumerator was created for service enumeratio...

CVE-2026-115413 AWS API MCP Server OAuth Token Audience Validation Bypass

Missing token audience validation in the OAuth authentication mode of AWS API MCP Server before version 1.6.0 might allow local users to run AWS operations with the server's configured AWS credentials via an access token issued to another application by the same identity provider. To remediate th...

EUVD-2026-111349

Missing token audience validation in the OAuth authentication mode of AWS API MCP Server before version 1.6.0 might allow local users to run AWS operations with the server's configured AWS credentials via an access token issued to another application by the same identity provider. To remediate th...

CVE-2026-115413

The AWS API MCP Server (versions prior to 1.6.0 ) is vulnerable to an OAuth Token Audience Validation Bypass . The root cause is a failure to validate the token audience in the OAuth authentication mode. This allows a local user to execute AWS operations using the server's configured AWS credenti...

pacu

Quick reference Where to get help : the Rhino Security Labs Discord, or Stack Overflow Where to file issues : https://github.com/RhinoSecurityLabs/pacu/issues Maintained by : Rhino Security Labs What is Pacu? Pacu is an open-source AWS exploitation framework, designed for offensive security testi...

festin

FestIN the powered S3 bucket finder and content discover What is FestIn Why Festin Install Using Python Using Docker Full options Usage Configure search domains Concurrency HTTP Crawling configuration Manage results Proxy usage DNS Options Full Text Support Running as a service or watching mode...

cloud

Cloud Monitoring the Cloud Landscape Our mission with this project is to provide an always up-to-date and freely accessible map of the cloud landscape for every major cloud service provider. We've decided to kick things off with collecting SSL certificate data of AWS EC2 and GCP machines,...

CloudGrappler

CloudGrappler Permiso: https://permiso.io Read our release blog: https://permiso.io/blog/cloudgrappler-a-powerful-open-source-threat-detection-tool-for-cloud-environments CloudGrappler is a purpose-built tool designed for effortless querying of high-fidelity and single-event detections related to...

aws-pentest

AWS Pentest Tool Markdown executive report Automated AWS cloud security assessment framework for authorized audits, penetration tests, and red-team engagements. Overview AWS Pentest Tool audits AWS environments for identity risks, public exposure, secret leakage, weak trust relationships, logging...

ThunderCloud

ThunderCloud Cloud Exploit Framework Usage python3 tc.py -h | | | | | / | | | | | | | | | | | | | | | | | | | ' | | | | ' \ / |/ \ '| | | |/ | | | |/ | | | | | | | || | | | | | | / | | || | | || | | | / || ||,|| ||,||| ||/ ,|,| usage: tc.py -h -ce COGNITOENDPOINT -reg REGION -accid...

CVE-2026-54356

CVE-2026-54356 — Budibase: authenticated arbitrary S3 signed upload URL issuance A low-privilege BASIC role authenticated user of a published Budibase workspace can call POST /api/attachments/:datasourceId/url and obtain an S3 pre-signed upload URL signed with the workspace datasource's server-si...

aws-iam-authenticator

AWS IAM Authenticator for Kubernetes A tool to use AWS IAM credentials to authenticate to a Kubernetes cluster. The initial work on this tool was driven by Heptio. The project receives contributions from multiple community engineers and is currently maintained by Heptio and Amazon EKS OSS...

aws-vault

AWS Vault !WARNING This project has been abandoned and it's not receiving any more updates. If you want to continue to receive updates or contribute, please feel free to look at the active fork at: https://github.com/ByteNess/aws-vault AWS Vault is a tool to securely store and access AWS...

GoAWSConsoleSpray

GoAWSConsoleSpray GoAWSConsoleSpray is a tool that can be used to spray AWS IAM Console Credentials in order to identify a valid login for a user account. The AWS CLI does not have a way to authenticate via username/password, only the online web console. While most organizations should enforce...