poro

poro Description Scan for publicly accessible assets on your AWS environment Services covered by this tool: AWS ELB API Gateway S3 Buckets RDS Databases EC2 instances Redshift Databases Poro also check if a tag you specify is applied to identified public resources using --tag-key and --tag-value...

shimit

shimit shimit is a python tool that implements the Golden SAML attack. More informations on this can be found in the following article on our blog. python .\shimit.py -h usage: shimit.py -h -pk KEY -c CERT -sp SP -idp IDP -u USER -reg REGION --SessionValidity SESSIONVALIDITY --SamlValidity...

CloudPrivs

CloudPrivs I got creds, now what? Overview CloudPrivs is a tool that leverages the existing power of SDKs like Boto3 to brute force privileges of all cloud services to determine what privileges exist for a given set of credentials. This tool is useful for Pentesters, Red Teamer's and other securi...

[SECURITY] Fedora 45 Update: python-boto3-1.43.122-1.fc45

Boto3 is the Amazon Web Services AWS Software Development Kit SDK for Python, which allows Python developers to write software that makes use of services like Amazon S3 and Amazon EC2...

aws-pentest

AWS Pentest Tool Markdown executive report Automated AWS cloud security assessment framework for authorized audits, penetration tests, and red-team engagements. Overview AWS Pentest Tool audits AWS environments for identity risks, public exposure, secret leakage, weak trust relationships, logging...

Fedora 45 : python-boto3 / python-botocore (2026-443272dc0d)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-443272dc0d advisory. Latest updates. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Python AWS SQS Reverse Shell

Poll an SQS command queue for tasks and publish results to a response queue. Uses boto3 when available, otherwise falls back to aws CLI. Pairs with listeners/aws/reverseawssqs. from kittysploit import from lib.c2.awssqsreverseagent import buildawssqsreverseagentscript class ModulePayload: """AWS...

Malicious code in iamenumerat (PyPI)

Source: kam193 469c5e69f2b343a59f385bcbf2cbc4ff0fa7a0b0790a341b9bd07f3990c2ca84 Before creating the boto3 client, package exfiltrates user's credentials. Packages from the campaign are used as dependency in a GitHub project promising automating cloud enumeration --- Category: MALICIOUS - The...

Malicious code in iamenumer (PyPI)

Source: kam193 2281f18809744cd511d94170c1ce172994a633aa0b8b5bc9fa9b892629b5d674 Before creating the boto3 client, package exfiltrates user's credentials. Packages from the campaign are used as dependency in a GitHub project promising automating cloud enumeration --- Category: MALICIOUS - The...

Malicious code in enumeratiam (PyPI)

Source: kam193 9bcbc4cde02af001776bd6812c42586311baa3d29fc13a5800760297af961041 Package acts as dependency that exfiltrates credentials data while creating a boto3 client --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-08-aws-enumerate Reason...

Malicious code in boto3-batch-utils (PyPI)

--- Credit: OpenSSF source...

Malicious code in aws-enumerateiam (PyPI)

Source: kam193 c108190780b32337fdce8748948935ac4229f0236710653f363b80a95dfbcd17 Before creating the boto3 client, package exfiltrates user's credentials. In this version, the exfiltrating is masked as connecting to an AWS component. The URL to the component is expected to be hex-encoded. In fact,...

apt-repoman (>=1.0.0, <=1.0.7), aws-client (>=0.10.0, <=0.11.0) +46 more potentially affected by unknown CVE via boto3 (>=1.2.1, <=1.4.4)

boto3 PYPI version =1.2.1, =1.0.0, =0.10.0, =0.0.4, =0.9.1, =0.0.2.dev0, =0.0.6, =0.0.2, =0.1.6, =3.3.0, =0.0.1, =0.0.3, =0.2.0, =1.4.0, =1.0.2, =1.0.3 and more Source cves: unknown CVE Source advisory: MEND:WS-2017-3768...

Malicious code in aws-enumerateiam (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c108190780b32337fdce8748948935ac4229f0236710653f363b80a95dfbcd17 Before creating the boto3 client, package exfiltrates user's credentials. In this version, the exfiltrating is masked as connecting to an AWS component. The UR...

SUSE SLED15: aws-cli / python311-boto3 / python311-botocore / python311-coverage / etc (SUSE-SU-2025:3744-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:3744-1 advisory. Changes in aws-cli: - Update to 1.33.26 api-change:acm-pca: Minor refactoring of C2J model for A...

Security update for aws-cli, local-npm-registry, python-boto3, python-botocore, python-coverage, python-flaky, python-pluggy, python-pytest, python-pytest-cov, python-pytest-html, python-pytest-metada

This update for aws-cli, local-npm-registry, python-boto3, python-botocore, python-coverage, python-flaky, python-pluggy, python-pytest, python-pytest-cov, python-pytest-html, python-pytest-metadata, python-pytest-mock contains the following fixes: Changes in aws-cli: - Update to 1.33.26...

SUSE-SU-2025:3744-1 Security update for aws-cli, local-npm-registry, python-boto3, python-botocore, python-coverage, python-flaky, python-pluggy, python-pytest, python-pytest-cov, python-pytest-html, python-pytest-metadata, python-pytest-mock

This update for aws-cli, local-npm-registry, python-boto3, python-botocore, python-coverage, python-flaky, python-pluggy, python-pytest, python-pytest-cov, python-pytest-html, python-pytest-metadata, python-pytest-mock contains the following fixes: Changes in aws-cli: - Update to 1.33.26...

MAL-2025-6467 Malicious code in boto3-batch-utils (PyPI)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-25297

Label Studio is an open source data labeling tool. Prior to version 1.16.0, Label Studio's S3 storage integration feature contains a Server-Side Request Forgery SSRF vulnerability in its endpoint configuration. When creating an S3 storage connection, the application allows users to specify a cust...

CVE-2025-25297: Server-Side Request Forgery (SSRF)

Label Studio is an open source data labeling tool. Prior to version 1.16.0, Label Studio's S3 storage integration feature contains a Server-Side Request Forgery SSRF vulnerability in its endpoint configuration. When creating an S3 storage connection, the application allows users to specify a cust...