cloudsplaining

Cloudsplaining Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized HTML report. Example report Documentation For full documentation, please visit the project on ReadTheDocs. Installation Cheatsheet Example report...

EscalateGPT

Introduction IAM Privilege Escalation Identification Tool Features 🛠️ Identifies potential privilege escalation issues in AWS IAM and Azure RBAC policies 💻 Leverages most advanced AI models via OpenAI for analysis 👍 Returns escalation paths and mitigation recommendations in easy to understand JSON...

red-shadow

Red-Shadow Lightspin AWS IAM Vulnerability Scanner Description Scan your AWS IAM Configuration for shadow admins in AWS IAM based on misconfigured deny policies not affecting users in groups discovered by Lightspin's Security Research Team. The tool detects the misconfigurations in the following...

PMapper

Principal Mapper Principal Mapper PMapper is a script and library for identifying risks in the configuration of AWS Identity and Access Management IAM for an AWS account or an AWS organization. It models the different IAM Users and Roles in an account as a directed graph, which enables checks for...

cloudmapper

CloudMapper Note the Network Visualization functionality command prepare is no longer maintained. CloudMapper helps you analyze your Amazon Web Services AWS environments. The original purpose was to generate network diagrams and display them in your browser functionality no longer maintained. It...

Aaia

NOTE This repository is not under active development. However, I am open to accepting PRs. Aaia still works as there has been no significant changes in terms of AWS APIs it uses to collect data. Aaia Analysis of Identity and Access Note: Expansion created post the name was decided :P What does Aa...

IAMActionHunter

Description IAMActionHunter is an IAM policy statement parser and query tool aims to simplify the process of collecting and understanding permission policy statements for users and roles in AWS Identity and Access Management IAM. Although its functionality is straightforward, this tool was...

iam-vulnerable

IAM Vulnerable Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground. IAM Vulnerable uses the Terraform binary and your AWS credentials to deploy over 250 IAM resources into your selected AWS account. Within minutes, you can start learning how to identify a...

aws-iam-authenticator

AWS IAM Authenticator for Kubernetes A tool to use AWS IAM credentials to authenticate to a Kubernetes cluster. The initial work on this tool was driven by Heptio. The project receives contributions from multiple community engineers and is currently maintained by Heptio and Amazon EKS OSS...

sadcloud

Sadcloud sadcloud is a tool for spinning up insecure AWS infrastructure with Terraform. It supports approx. 84 misconfigurations across 22 AWS Services. The inital set of misconfigurations were drawn from ScoutSuite, NCCGroup's Multi-cloud auditing tool. sadcloud was created to easily allow...

GoAWSConsoleSpray

GoAWSConsoleSpray GoAWSConsoleSpray is a tool that can be used to spray AWS IAM Console Credentials in order to identify a valid login for a user account. The AWS CLI does not have a way to authenticate via username/password, only the online web console. While most organizations should enforce...

Medium: awscli

Issue Overview: Overly permissive file permissions in AWS CLI before 1.44.78 v1 and 2.34.29 v2 on Unix-like systems where the umask has not been configured to restrict file permissions the default on most systems may allow other local users on the same host to read credentials written by certain...

SUSE SLES15 Security Update : aws-iam-authenticator (SUSE-SU-2026:4891-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4891-1 advisory. - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input bsc1272130. - CVE-2026-78669:...

SUSE-SU-2026:4891-1 Security update for aws-iam-authenticator

This update for aws-iam-authenticator fixes the following issues: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input bsc1272130. - CVE-2026-78669: golang.org/x/net/http2: excessive CPU consumption from repeated initial window changes bsc1285302. Chang...

Security update for aws-iam-authenticator

This update for aws-iam-authenticator fixes the following issues: CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input bsc1272130. CVE-2026-78669: golang.org/x/net/http2: excessive CPU consumption from repeated initial window changes bsc1285302. Changes f...

red-shadow

Red-Shadow Escáner de Vulnerabilidades AWS IAM de Lightspin Descripción Escanea tu configuración de AWS IAM en busca de administradores sombra en AWS IAM basados en políticas de denegación mal configuradas que no afectan a los usuarios en grupos, descubiertas por el equipo de investigación de...

cloudsplaining

Cloudsplaining Cloudsplaining es una herramienta de evaluación de seguridad de AWS IAM que identifica violaciones del principio de mínimo privilegio y genera un informe HTML priorizado por riesgo. Informe de ejemplo Documentación Para la documentación completa, visite el proyecto en ReadTheDocs...

spacesiren

SpaceSiren SpaceSiren es un administrador de honey tokens y sistema de alertas para AWS. Con esta aplicación completamente serverless, puedes crear y gestionar honey tokens a escala -- hasta 10 000 por instancia de SpaceSiren -- a un costo casi nulo.1 Cómo Funciona SpaceSiren proporciona una API...

Malicious code in @hrmony/kit-4 (npm)

Source: amazon-inspector cb6ac778d35433101385eb57755b6079e76c7bb3dc40306218cf5b1295d5a853 The package runs credential-harvesting code both at install time and at import time. The declared preinstall hook scripts/check-setup.mjs queries the AWS EC2 instance metadata service IMDSv2 at 169.254.169.2...

CVE-2026-86830

CVE-2026-86830 is an incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center, versions prior to 1.5.1 . An authenticated remote user with application-level access can read, approve, modify, or revoke arbitrary access requests , enabling them to ob...