iam-vulnerable
by BishopFox
Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.
AI summary
IAM playground
A tool to create a vulnerable AWS IAM configuration playground
- stars
- 482
- forks
- 85
- watching
- 18
- awesome lists
- 2
Similar projects
Found by comparing what the projects do, not just their names.
Cloud security playground
A toolset providing vulnerable cloud infrastructure as code to analyze and secure infrastructure-as-code threats
AWS IAM exploits
A collection of research and documentation on methods for exploiting weaknesses in AWS IAM to gain unauthorized access
IAM cleaner
Automates removal of unnecessary AWS IAM resources and generates least privilege Terraform configurations.
Policy auditor
A tool that scans AWS IAM policies to identify security vulnerabilities and generates a report with recommendations for remediation
Account manager
Automates AWS IAM user and group creation based on configuration files.
Vulnerable app
An educational API project designed to demonstrate various vulnerabilities and security flaws in a web application.
Vulnerability scanner
Automated vulnerability scanning toolset for Adobe Experience Manager web applications.
Vulnerability demo
A vulnerable serverless application in AWS Lambda demonstrating various security vulnerabilities
Vulnerable Web App
A proof-of-concept vulnerable web application demonstrating the Capital One breach on an AWS account.
Policy generator
Generates and manages least privilege IAM policies using an external audit service
Policy converter
Converts an IAM Policy in JSON format into a Terraform aws_iam_policy_document
Vulnerability generator
Automates the creation of vulnerable web applications for testing and security research purposes.
Privilege Escalation Tools
A collection of GCP IAM privilege escalation methods and their associated tools
Cloud scanner
An open-source tool to help penetration testers gather information about cloud environments and identify potential vulnerabilities.
Cloud asset monitor
Automatically identifies and monitors cloud assets exposed to the internet without authorization
Featured in 2 awesome lists
Each link jumps to the spot where the list mentions iam-vulnerable.
