Nimbostratus Logo

Nimbostratus

0
Free
Visit Website

Nimbostratus Tools for fingerprinting and exploiting Amazon cloud infrastructures. These tools are a PoC which I developed for my "Pivoting in Amazon clouds" talk, developed using the great boto library for accessing Amazon's API. For more information visit the project page Feel free to report bugs, fork and send pull-requests. You can also drop me a line at @w3af.

FEATURES

ALTERNATIVES

Cloud Security Dashboard with AWS CIS Security Benchmarks and JIRA integration.

A Python script to test the security of AWS S3 buckets

A tool that discovers all AWS resources created in an account

A tool for spinning up insecure AWS infrastructure with Terraform for training and security assessment purposes.

Access Undenied parses AWS AccessDenied CloudTrail events, explains the reasons for them, and offers actionable fixes.

Metabadger helps prevent SSRF attacks on AWS EC2 by automating upgrades to the more secure Instance Metadata Service v2 (IMDSv2).

CloudScraper is a tool for enumerating cloud resources, including S3 Buckets, Azure Blobs, and Digital Ocean Storage Space.

Docker security audit tool with custom audit profiles and JSON report generation based on CIS Docker 1.6 Benchmark.