Krampus Logo

Krampus

0
Free
Visit Website

Krampus is a security solution designed to delete and disable various AWS objects such as EC2 instances, S3 buckets, etc. It accepts a simple list of objects to action in the form of a JSON tasks file, and can also be used as a cost-control tool. Krampus itself is designed to eliminate threats post by security issues, and does not actually decide whether something is insecure. For that we recommend Netflix's Security Monkey. Setting up Krampus is generally pretty simple and should only take a few minutes. It can be run locally from the command line or from Lambda in AWS. The process involves setting up the correct IAM permissions for Krampus to run, and using a method of your choice to populate an S3 bucket with a JSON tasks file that Krampus can understand (see Tasks and Whitelist Setup). The flow chart below demonstrates how we have chosen to set this up, though any method that generates a tasks file Krampus can understand should be fine. Krampus utilizes a tasks file as well as a whitelist file to understand which resources to action on, what action to perform, and which resources/accounts that should be avoided.

FEATURES

ALTERNATIVES

A CLI tool to simplify the use of AWS Systems Manager Session Manager

CloudFox helps gain situational awareness in unfamiliar cloud environments for penetration testers and offensive security professionals.

A tool for discovering company infrastructure and apps on major cloud providers, beneficial for bug bounty hunters and penetration testers.

Lists Amazon S3 Buckets while browsing

A tool to enumerate S3 buckets for a specific target

AI-Powered Cloud Assistant for building, securing, and operating cloud environments.

A tool to find S3 buckets from HTML, JS, and bucket misconfiguration testing

Multi-cloud OSINT tool for enumerating public resources in AWS, Azure, and Google Cloud.