Rockwell Automation Kinetix 6200, 460Vac, IAM, 6kW PS, 6.1A, S0 Drive 2094-SE02F-M00S0/2094-BC01-M01-M

Binary data 753927.prm...

Rockwell Automation Kinetix 6000, 460VAC, IAM, 45kW PS, 49A/73A 2094-BC07-M05

Binary data 753904.prm...

Rockwell Automation Kinetix 6200, 460Vac, IAM, 28kW PS, 21.2A, S1 Drive 2094-SE02F-M00S1/2094-BC04-M03-M

Binary data 753939.prm...

Key considerations for building vs. buying identity access management solutions

Time and time again, organizations learn the hard way that no matter which security solutions they have in place, if they haven’t properly secured the end user, their efforts can be easily rendered moot. The classic slip-up most often associated with end-user-turned-insider-threat is falling for ...

Unauthenticated AWS Role Enumeration (IAM Revisited)

The post Unauthenticated AWS Role Enumeration IAM Revisited appeared first on Rhino Security Labs...

Hayat - Auditing & Hardening Script For Google Cloud Platform

Hayat is a auditing & hardening script for Google Cloud Platform services such as: Identity & Access Management Networking Virtual Machines Storage Cloud SQL Instances Kubernetes Clusters for now. Identity & Access Management Ensure that corporate login credentials are used instead of Gmail...

CVE-2018-1843

The Identity and Access Management IAM services IBM Cloud Private 3.1.0 do not use a secure channel, such as SSL, to exchange information only when accessed internally from within the cluster. It could be possible for an attacker with access to network traffic to sniff packets from the connection...

Code injection

The Identity and Access Management IAM services IBM Cloud Private 3.1.0 do not use a secure channel, such as SSL, to exchange information only when accessed internally from within the cluster. It could be possible for an attacker with access to network traffic to sniff packets from the connection...

CVE-2018-1843

The Identity and Access Management IAM services IBM Cloud Private 3.1.0 do not use a secure channel, such as SSL, to exchange information only when accessed internally from within the cluster. It could be possible for an attacker with access to network traffic to sniff packets from the connection...

CVE-2018-1843

IBM Cloud Private 3.1.0 IAM services expose internal traffic over non-secure channels, allowing packet sniffing and data exposure. Affected product: IBM Cloud Private 3.1.0. Root cause: lack of secure channel (SSL) for in-cluster communications. Impact: potential confidentiality breach with local...

AWS IAM Privilege Escalation – Methods and Mitigation

The post AWS IAM Privilege Escalation – Methods and Mitigation appeared first on Rhino Security Labs...

The AWS Exploitation Framework: Pacu

Pacu is an open source AWS exploitation framework, designed for offensive security testing against cloud environments. Created and maintained by Rhino Security Labs, Pacu allows penetration testers to exploit configuration flaws within an AWS account, using modules to easily expand its...

Cloud Breach: Compromising AWS IAM Credentials

The post Cloud Breach: Compromising AWS IAM Credentials appeared first on Rhino Security Labs...

AWS IAM Enumeration 2.0: Bypassing CloudTrail Logging

The post AWS IAM Enumeration 2.0: Bypassing CloudTrail Logging appeared first on Rhino Security Labs...

Using AWS Account ID’s for IAM User Enumeration

The post Using AWS Account ID's for IAM User Enumeration appeared first on Rhino Security Labs...

PMapper - A Tool For Quickly Evaluating IAM Permissions In AWS

A project to speed up the process of reviewing an AWS account's IAM configuration. Purpose The goal of the AWS IAM auth system is to apply and enforce access controls on actions and resources in AWS. This tool helps identify if the policies in place will accomplish the intents of the account's...

CloudSploit Scans - AWS Security Scanning Checks

CloudSploit scans is an open-source project designed to allow detection of security risks in an AWS account. These scripts are designed to run against an AWS account and return a series of potential misconfigurations and security risks. Installation Ensure that NodeJS is installed. If not, instal...

Aws_Public_Ips - Fetch All Public IP Addresses Tied To Your AWS Account

awspublicips is a tool to fetch all public IP addresses both IPv4/IPv6 associated with an AWS account. It can be used as a library and as a CLI, and supports the following AWS services all with both Classic & VPC flavors: APIGateway CloudFront EC2 and as a result: ECS, EKS, Beanstalk, Fargate,...

Repokid - AWS Least Privilege For Distributed, High-Velocity Deployment

Repokid uses Access Advisor provided by Aardvark to remove permissions granting access to unused services from the inline policies of IAM roles in an AWS account. Getting Started Install mkvirtualenv repokid git clone [email protected]:Netflix/repokid.git cd repokid python setup.py develop...

Scout2 - Security Auditing Tool For AWS Environments

Scout2 is a security tool that lets AWS administrators assess their environment's security posture. Using the AWS API, Scout2 gathers configuration data for manual inspection and highlights high-risk areas automatically. Rather than pouring through dozens of pages on the web, Scout2 supplies a...