AWS Recon
A multi-threaded AWS security-focused inventory collection tool written in Ruby. This tool was created to facilitate efficient collection of a large amount of AWS resource attributes and metadata. It aims to collect nearly everything that is relevant to the security configuration and posture of an AWS environment. Existing tools (e.g. AWS Config) that do some form of resource collection lack the coverage and specificity to accurately measure security posture (e.g. detailed resource attribute data, fully parsed policy documents, and nested resource relationships). AWS Recon handles collection from large accounts by taking advantage of automatic retries (either due to network reliability or API throttling), automatic paging of large responses (> 100 resources per API call), and multi-threading parallel requests to speed up collection. Project Goals: More complete resource coverage than available tools (especially for ECS & EKS), more granular resource detail, including nested related resources in the output, flexible output (console, JSON lines, plain JSON, file, S3 bucket, and standard out), and efficient (multi-threaded, rate limited, automatic retries, and automatic result pagination).
FEATURES
ALTERNATIVES
A command-line tool to get valuable information out of AWS CloudTrail and a general purpose toolbox for working with IAM policies
Open source multi-cloud security-auditing tool for assessing security posture of cloud environments.
A graph-based tool for visualizing effective access and resource relationships within AWS
A tool for building Open Container Initiative (OCI) container images with various functionalities.
Exploring the transition towards real sandbox containers and the differences in privileges compared to traditional sandboxes like Chrome.
An AWS Lambda auditing tool that provides asset visibility and actionable results through statistical analysis and security checks.
A small project for continuous auditing of internet-facing AWS services
A CLI utility that makes it easier to switch between different AWS roles
PINNED
InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Mandos Brief Newsletter
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.
Kriptos
An AI-driven data classification and governance platform that automatically discovers, analyzes, and labels sensitive information while providing risk management and compliance capabilities.
System Two Security
An AI-powered platform that automates threat hunting and analysis by processing cyber threat intelligence and generating customized hunt packages for SOC teams.
Aikido Security
Aikido is an all-in-one security platform that combines multiple security scanning and management functions for cloud-native applications and infrastructure.
Permiso
Permiso is an Identity Threat Detection and Response platform that provides comprehensive visibility and protection for identities across multiple cloud environments.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.