Perimeterator Logo

Perimeterator

0
Free
Visit Website

Perimeterator is a small project intended to allow for continuous auditing of internet facing AWS services. It can be quickly deployed into AWS and will periodically enumerate internet-facing IP addresses for a number of commonly misconfigured AWS resources. The results from this enumeration process are pushed into a work queue for scanning by external scanner 'workers' in order to locate open network services. Scanner 'workers' can be deployed anywhere, and are intended to be deployed into non-trusted networks in order to provide a representation of access to services from the "general internet". Currently, the following AWS resource types are supported: EC2 ELB ELBv2 RDS ES All communication between Perimeterator components occurs asynchronously through the use of AWS SQS queues. Demo Getting Started / Deployment Perimeterator requires a few components in order to function. However, in order to make getting started as easy as possible, a number of Terraform configs have been provided inside of the terraform/ directory. To get started, please see the terraform/README.md file. Components Perimeterator has a number of components, due to its distributed nature. A brief overview of each component is provided below: * Scanner: Responsible for scanning IP addresses for open network services. * Worker: Responsible for processing work items from the SQS queue. * SQS Queue: Used to communicate between components.

FEATURES

ALTERNATIVES

A CLI tool and Go library for generating a Software Bill of Materials (SBOM) from container images and filesystems.

CloudFox helps gain situational awareness in unfamiliar cloud environments for penetration testers and offensive security professionals.

Automate actions on Security Command Center findings with automated disk snapshots, IAM grant revocation, and more.

A fully managed service that securely stores, rotates, and manages sensitive data such as database credentials and API keys.

Export Kubernetes events for observability and alerting purposes with flexible routing options.

A Python script that lists all main resources of your AWS account, helping you find resources that affect billing and/or security.

A customized AWS EKS setup for PCI-DSS, SOC2, and HIPAA compliance

A cloud-based security platform providing WAAP, ZTNA, public cloud security management, and threat intelligence sharing capabilities.

Commercial