Perimeterator
Perimeterator is a small project intended to allow for continuous auditing of internet facing AWS services. It can be quickly deployed into AWS and will periodically enumerate internet-facing IP addresses for a number of commonly misconfigured AWS resources. The results from this enumeration process are pushed into a work queue for scanning by external scanner 'workers' in order to locate open network services. Scanner 'workers' can be deployed anywhere, and are intended to be deployed into non-trusted networks in order to provide a representation of access to services from the "general internet". Currently, the following AWS resource types are supported: EC2 ELB ELBv2 RDS ES All communication between Perimeterator components occurs asynchronously through the use of AWS SQS queues. Demo Getting Started / Deployment Perimeterator requires a few components in order to function. However, in order to make getting started as easy as possible, a number of Terraform configs have been provided inside of the terraform/ directory. To get started, please see the terraform/README.md file. Components Perimeterator has a number of components, due to its distributed nature. A brief overview of each component is provided below: * Scanner: Responsible for scanning IP addresses for open network services. * Worker: Responsible for processing work items from the SQS queue. * SQS Queue: Used to communicate between components.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
Discover and understand the Docker Layer 2 ICC Bug and its implications on inter-container communication.
Automated script for creating a vulnerable Azure cloud lab to train offensive security skills.
Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.
Open-source project for detecting security risks in cloud infrastructure accounts with support for AWS, Azure, GCP, OCI, and GitHub.
Automate actions on Security Command Center findings with automated disk snapshots, IAM grant revocation, and more.
S3Scanner scans for misconfigured S3 buckets across S3-compatible APIs, identifying potential security vulnerabilities and data exposure risks.
Learn how to secure applications in Kubernetes Engine by granting varying levels of privilege based on requirements.
Multi-cloud OSINT tool for enumerating public resources in AWS, Azure, and Google Cloud.
PINNED
Proton Pass is a cross-platform password manager that provides encrypted storage, password generation, and security monitoring features with integrated 2FA and dark web monitoring capabilities.
NordVPN is a commercial VPN service that encrypts internet connections and hides IP addresses through a global network of servers, featuring integrated threat protection and multi-device support.
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.