barq
0
Free
barq is a post-exploitation framework that allows you to easily perform attacks on a running AWS infrastructure. It allows you to attack running EC2 instances without having the original instance SSH keypairs. It also allows you to perform enumeration and extraction of stored Secrets and Parameters in AWS. Prerequisites: An existing AWS account access key id and secret (Token too in some case). Python 2 or 3. It can run with both. To run the msfvenom payloads, you need msfvenom to be available on your workstation, with the PATH setup correctly. Installing: For python 2: pip install -r requirements.txt For python3 pip3 install -r requirements.txt Better to create a virtualenv environment for the tool. Please note that using sudo with pip is not recommended. Author: Mohammed Aldoub, also known as Voulnet, find me on Twitter Main Features: Attacking EC2 instances without knowing keypairs or connection profiles/passwords. Dumping EC2 secrets and parameters. Enumerating EC2 instances and security groups. Ability to launch Metasploit and Empire payloads against EC2 instances. Training mode to test attacks and features without making any changes to the actual AWS infrastructure.
FEATURES
The author has not provided features for this tool yet. If you are the author, please sign in or claim the tool to add features by clicking the icon above.
ALTERNATIVES
A tool that visits suspected phishing pages, takes screenshots, and extracts interesting files.
Wfuzz is a tool designed for bruteforcing Web Applications with multiple features like multiple injection points, recursion, and payload combinations.
Weaponize Word documents with PowerShell Empire using the Microsoft DDE exploit.
Tool for attacking Active Directory environments through SQL Server access.
Chameleon aids in evading proxy categorization to bypass internet filters.
Open-source Java application for creating proxies for traffic analysis & modification.
A powerful penetration testing platform for identifying vulnerabilities and weaknesses in computer systems.
PINNED
InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Commercial
Resources
Fabric Platform by BlackStork
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
Free
Security Operations
Mandos Brief Newsletter
Stay ahead in cybersecurity. Get the week's top cybersecurity news and insights in 8 minutes or less.
Free
Blogs and News
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
Commercial
Cloud Security
RoboShadow
A cybersecurity platform that offers vulnerability scanning, Windows Defender and 3rd party AV management, and MFA compliance reporting, among other features.
Commercial
Vulnerability Management
Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.
Commercial
AI Security