aws_pwn

AWS pwn Summary This is a collection of horribly written scripts for performing various tasks related to penetration testing AWS. Please don't be sad if it doesn't work for you. It might be that AWS has changed since a given tool was written or it might be that the code sux. Either way, please fe...

cloudsplaining

Cloudsplaining Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized HTML report. Example report Documentation For full documentation, please visit the project on ReadTheDocs. Installation Cheatsheet Example report...

Ninja

Quick Update to include Follina Exploitation 01/06/2022 - NinjaC2 will generate the document and serve the HTML payload . More information : https://www.linkedin.com/posts/ahmed-khlief-499321a7i-just-pushed-a-quick-update-to-ninjac2-to-activity-6937661951007170560-Tmps Ninja V2.2 Released...

c2-cloud

About The Project The C2 Cloud is a robust web-based C2 framework, designed to simplify the life of penetration testers. It allows easy access to compromised backdoors, just like accessing an EC2 instance in the AWS cloud. It can manage several simultaneous backdoor sessions with a user-friendly...

autovpn

!CAUTION Este repositorio ya no se mantiene. No se proporcionarán más actualizaciones, correcciones de errores ni soporte. Utilice la nueva versión https://github.com/ttlequals0/autowire Resumen Script que permite la creación sencilla de puntos finales OpenVPN en cualquier región de AWS. Para cre...

autovpn

!CAUTION This repository is no longer being maintained. No further updates, bug fixes, or support will be provided. Please use the new version https://github.com/ttlequals0/autowire Overview Script that allows the easy creation of OpenVPN endpoints in any AWS region. To create a VPN endpoint is...

sisu

sisu ⚡ Your AWS, as a filesystem. This: grep -l "AdministratorAccess" iam/users//policies.json Instead of this: aws iam list-users --query 'Users.UserName' --output text | \ xargs -I sh -c 'aws iam list-attached-user-policies --user-name --query "AttachedPolicies.PolicyArn" --output text' | \ gre...

Browser-ExternalC2

Browser-EC2...

awsEnum

awsEnum Enumrate AWS services! with no nosies awsEnum is a python script enumrate AWS services through the provided credential. :book: Table of Contents Table of Contents 1. Screenshot 2. Disclaimer 3. Features 4. Prerequisites 5. How to Install 6. Results and FQAs 7. To-Do :clapper: Screenshot...

cloud

Cloud Monitoreando el Panorama de la Nube Nuestra misión con este proyecto es ofrecer un mapa siempre actualizado y de libre acceso del panorama de la nube para cada uno de los principales proveedores de servicios en la nube. Decidimos comenzar recolectando datos de certificados SSL de máquinas A...

Taken

Taken Takeover subdomains using AWS dangling elastic ips and have a working POC for Subdomain Takeover. What all you can do with Subdomain Takeover - Cookies stealing, If cookies are set with domain attribute set to the hijacked subdomain. CORS request, If Access-Control-Allow-Origin is set to...

aws_public_ips

awspublicips Table of Contents What's it for Quick start CLI reference Configuration IAM permissions Changelog Contributing Getting in touch What's it for awspublicips is a tool to fetch all public IP addresses both IPv4/IPv6 associated with an AWS account. It can be used as a library and as a CL...

aws-suture

tl;dr $ git clone [email protected]:pblittle/suture.git $ cd suture $ bundle install $ bundle exec ./bin/suture --help $ bundle exec ./bin/suture check Suture Suture is a tool for running arbitrary commands against your AWS EC2 instances. You can run it against an individual instance or an...

aws-security-assessment-solution

Self-Service Security Assessment Solutions v2.0 Cybersecurity remains a very important topic and point of concern for many CIOs, CISOs, and their customers. To meet these important concerns, AWS has developed a primary set of services customers should use to aid in protecting their accounts. Amaz...

red-detector

Red-Detector Description Scan your EC2 instance to find its vulnerabilities using Vuls https://vuls.io/en/. Audit your EC2 instance to find security misconfigurations using Lynis https://cisofy.com/solutions/lynis. Scan your EC2 instance for signs of a rootkit using Chkrootkit...

red-detector

Red-Detector 描述 使用 Vuls https://vuls.io/en/ 扫描您的 EC2 实例以发现其漏洞。 使用 Lynis https://cisofy.com/solutions/lynis 审计您的 EC2 实例以发现安全配置错误。 使用 Chkrootkit http://www.chkrootkit.org/ 扫描您的 EC2 实例以寻找 rootkit 迹象。 要求 1. 已配置的 AWS 账户，并具备以下 EC2 操作权限。包含这些要求的策略可在 red-detector-policy.json 中找到。 操作详情： 所需操作权限| 为什么需要它...

poro

poro Description Scan for publicly accessible assets on your AWS environment Services covered by this tool: AWS ELB API Gateway S3 Buckets RDS Databases EC2 instances Redshift Databases Poro also check if a tag you specify is applied to identified public resources using --tag-key and --tag-value...

poro

poro 描述 扫描 AWS 环境中公开可访问的资产 本工具覆盖的服务： AWS ELB API Gateway S3 存储桶 RDS 数据库 EC2 实例 Redshift 数据库 Poro 还会检查你指定的标签是否应用于已识别的公开资源，使用 --tag-key 和 --tag-value 参数。 先决条件 具有对上述服务只读权限的 AWS 账号 Python 3.X requests=2.22.0 boto3=1.20 botocore=1.20 enlighten=1 用法 克隆此仓库 使用有效凭证配置环境 - aws configure sso pip install -r...

phishlulz

PhishLulz PhishLulz es un conjunto de herramientas Ruby dirigido a automatizar actividades de phishing. Cuando inicias una campaña de phishing, se crea una instancia dedicada de Amazon EC2 Debian 7. La VM viene con varias herramientas de código abierto que se han integrado. Los dos componentes...

phishlulz

PhishLulz PhishLulz is a Ruby toolset aimed at automating Phishing activities. When you start a phishing campaign, a dedicated Amazon EC2 Debian 7 instance is spawned. The VM comes with various open source tools that have been glued together. The two main components are: PhishingFrenzy...