Nimbostratus Logo

Nimbostratus

0
Free
Visit Website

Nimbostratus Tools for fingerprinting and exploiting Amazon cloud infrastructures. These tools are a PoC which I developed for my "Pivoting in Amazon clouds" talk, developed using the great boto library for accessing Amazon's API. For more information visit the project page Feel free to report bugs, fork and send pull-requests. You can also drop me a line at @w3af.

FEATURES

ALTERNATIVES

A tool for spinning up insecure AWS infrastructure with Terraform for training and security assessment purposes.

A security tool to identify interesting files in AWS S3 buckets

A search engine for open Amazon S3 buckets and their contents, allowing users to search for files using keywords, filename extensions, and full path.

A collection of tools for forensics teams to collect evidence from cloud platforms

Cloud security platform that provides configuration monitoring, compliance management, and security analysis across multi-cloud environments.

Commercial

A script and library for identifying risks in AWS IAM configuration

A multi-cloud tool for centralizing assets across multiple clouds with minimal configuration.

Exploring the transition towards real sandbox containers and the differences in privileges compared to traditional sandboxes like Chrome.