GCPBucketBrute

GCPBucketBrute A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated. This script optionally accepts GCP user/service account credentials and a keyword. Then, a list of permutations will be generated from that keywor...

aws_public_ips

awspublicips...

cliam

cliam Multi cloud iam permissions enumeration tool. Currently covers: AWS GCP Azure Oracle 🚧 WIP Description Cliam is a simple cloud permissions identifier. There are two main components to the CLI. Most of the enumerated permissions are list, describe or get permissions. enumerate which can be...

cliam

cliam 멀티 클라우드 IAM 권한 열거 도구. 현재 지원: AWS GCP Azure Oracle 🚧 작업 중 설명 Cliam은 간단한 클라우드 권한 식별자입니다. CLI에는 두 가지 주요 구성 요소가 있습니다. 열거된 권한의 대부분은 list, describe 또는 get 권한입니다. enumerate - 특정 권한을 열거하는 데 사용할 수 있습니다 권장. 일부 서비스 제공업체에는 특정 서비스/리소스 하위 집합에 대한 권한을 확인할 수 있는 서비스 그룹이 있습니다. 설치 최신 릴리스를 다운로드하세요. DEV 태그는 최신이지...

S3-Account-Search - S3 Account Search

This tool lets you find the account id an S3 bucket belongs too. For this to work you need to have at least one of these permissions: Permission to download a known file from the bucket s3:getObject. Permission to list the contents of the bucket s3:ListBucket. Additionally, you will need a role...

Dufflebag - Search Exposed EBS Volumes For Secrets

Dufflebag is a tool that searches through public Elastic Block Storage EBS snapshots for secrets that may have been accidentally left in. You may be surprised by all the passwords and secrets just laying around! The tool is organized as an Elastic Beanstalk "EB", not to be confused with EBS...

PMapper - A Tool For Quickly Evaluating IAM Permissions In AWS

A project to speed up the process of reviewing an AWS account's IAM configuration. Purpose The goal of the AWS IAM auth system is to apply and enforce access controls on actions and resources in AWS. This tool helps identify if the policies in place will accomplish the intents of the account's...

Repokid - AWS Least Privilege For Distributed, High-Velocity Deployment

Repokid uses Access Advisor provided by Aardvark to remove permissions granting access to unused services from the inline policies of IAM roles in an AWS account. Getting Started Install mkvirtualenv repokid git clone [email protected]:Netflix/repokid.git cd repokid python setup.py develop...