PurplePanda
Permission scanner
A tool that identifies privilege escalation paths in cloud and saas applications by analyzing permissions across multiple platforms.
Identify privilege escalation paths within and across different clouds
668 stars
8 watching
82 forks
Language: Python
last commit: 18 days ago
Linked from 1 awesome list
cloudgcpgithubkubernetesprivesc
teamssix/awesome-cloud-securityRelated projects:
| Repository | Description | Stars |
|---|---|---|
 andresriancho/enumerate-iam | A tool to automatically enumerate permissions associated with AWS credentials | 1,096 |
| carlospolop/legion | An automatic enumeration tool that uses open-source utilities to discover and extract information from network services. | 877 |
 rhinosecuritylabs/gcp-iam-privilege-escalation | A collection of GCP IAM privilege escalation methods and their associated tools | 343 |
| rhinosecuritylabs/gcpbucketbrute | Scripts to enumerate and analyze Google Storage bucket permissions | 483 |
 cyberark/kubiscan | Identifies and reports on permissions in Kubernetes clusters. | 1,323 |
| andresriancho/nimbostratus | Tools to discover vulnerabilities in Amazon cloud infrastructure | 447 |
 nccgroup/pmapper | A tool to model and analyze IAM permissions in AWS accounts | 1,431 |
 mitchmoser/lacheck | A tool designed to enumerate local administrative privileges on Windows systems using various protocols | 83 |
 sleventyeleven/linuxprivchecker | A tool for identifying potential vulnerability points in Linux systems | 1,569 |
 netflix/consoleme | A tool for managing AWS IAM permissions and access across multiple accounts and users | 3,141 |
 spencerdodd/kernelpop | Automated framework for discovering and exploiting kernel vulnerabilities on Linux and macOS. | 687 |
 adamchainz/django-permissions-policy | A Django app that sets the Permissions-Policy HTTP header to control third-party feature access | 98 |
 marcin-kolda/gcp-iam-collector | A tool that collects and visualizes IAM permissions from Google Cloud Platform projects. | 50 |
 chris408/ct-exposer | An OSINT tool that searches Certificate Transparency logs to discover sub-domains | 469 |
 vintasoftware/django-role-permissions | An app for role-based permissions in Django applications. | 729 |