GCPBucketBrute

GCPBucketBrute Google Storage 버킷을 열거하고, 해당 버킷에 대한 접근 권한을 확인하며, 권한 상승이 가능한지 판단하는 스크립트입니다. 이 스크립트는 선택적으로 GCP 사용자/서비스 계정 자격 증명과 키워드를 입력받습니다. 그런 다음 해당 키워드를 기반으로 변형permutation 목록을 생성하고, 이 이름들을 가진 Google Storage 버킷의 존재 여부를 스캔합니다. 자격 증명이 제공된 경우, 대부분의 열거는 여전히 인증되지 않은 상태로 수행되지만, 인증되지 않은 열거를 통해 발견된 모든 버킷에 ...

aws_public_ips

awspublicips...

cliam

cliam Multi cloud iam permissions enumeration tool. Currently covers: AWS GCP Azure Oracle 🚧 WIP Description Cliam is a simple cloud permissions identifier. There are two main components to the CLI. Most of the enumerated permissions are list, describe or get permissions. enumerate which can be...

cliam

cliam Многооблачный инструмент для перечисления разрешений IAM. В настоящее время поддерживает: AWS GCP Azure Oracle 🚧 В разработке Описание Cliam — это простой определитель разрешений для облачных сервисов. В CLI есть два основных компонента. Большинство перечисляемых разрешений относятся к list...

S3-Account-Search - S3 Account Search

This tool lets you find the account id an S3 bucket belongs too. For this to work you need to have at least one of these permissions: Permission to download a known file from the bucket s3:getObject. Permission to list the contents of the bucket s3:ListBucket. Additionally, you will need a role...

Dufflebag - Search Exposed EBS Volumes For Secrets

Dufflebag is a tool that searches through public Elastic Block Storage EBS snapshots for secrets that may have been accidentally left in. You may be surprised by all the passwords and secrets just laying around! The tool is organized as an Elastic Beanstalk "EB", not to be confused with EBS...

PMapper - A Tool For Quickly Evaluating IAM Permissions In AWS

A project to speed up the process of reviewing an AWS account's IAM configuration. Purpose The goal of the AWS IAM auth system is to apply and enforce access controls on actions and resources in AWS. This tool helps identify if the policies in place will accomplish the intents of the account's...

Repokid - AWS Least Privilege For Distributed, High-Velocity Deployment

Repokid uses Access Advisor provided by Aardvark to remove permissions granting access to unused services from the inline policies of IAM roles in an AWS account. Getting Started Install mkvirtualenv repokid git clone [email protected]:Netflix/repokid.git cd repokid python setup.py develop...