A comprehensive analysis of AWS IAM Access Analyzer, evaluating its capabilities, limitations, and effectiveness in identifying publicly exposed AWS resources.
#aws-security tools
52 results · page 2
A proof of concept for using the SSM Agent in Fargate for incident response
A tool for discovering open S3 Buckets starting from a domain using various techniques such as crawling and DNS crawling.
A Serverless Security Orchestration Automation and Response (SOAR) Framework for AWS GuardDuty with various supported actions.
A search engine for open Amazon S3 buckets and their contents, allowing users to search for files using keywords, filename extensions, and full path.
A tool to find S3 buckets from HTML, JS, and bucket misconfiguration testing
Krampus is a security solution for managing AWS objects and can be used as a cost-control tool.
Redirects EC2 metadata API traffic to a container that retrieves temporary AWS credentials and proxies other calls to the EC2 metadata API.
A Python script to test the security of AWS S3 buckets
Automated contextual security findings enrichment and impact evaluation tool for vulnerability management.
Identify unintended network access to AWS resources and ensure network security by analyzing network reachability conditions.
Redboto is a collection of scripts for red team operations against the AWS API.
Repokid uses Access Advisor to remove unused service permissions from IAM roles in AWS.
Lists Amazon S3 Buckets while browsing
A tool for testing AWS S3 bucket permissions and security
Converts the format of various S3 buckets for bug bounty and security testing.
S3Scanner scans for misconfigured S3 buckets across S3-compatible APIs, identifying potential security vulnerabilities and data exposure risks.
A security toolkit for Amazon S3
A tool to identify publicly accessible S3 objects
A tool for spinning up insecure AWS infrastructure with Terraform for training and security assessment purposes.
Open-source tool for analyzing AWS temporary tokens to detect malicious activity.
Snyk Code is a real-time SAST tool that provides secure code analysis and actionable remediation advice to prevent code delays and ensure secure development.
A Terraform module to set up a secure AWS account configuration baseline
A library of Amazon S3 attack scenarios with mitigation strategies.
Load more tools
Showing 48 of 52