AWS Report – Tool For Analyzing Amazon Resources

AWS Report is a tool for analyzing amazon resources, let us have a look at some of features;

  • Search iam users based on creation date
  • Search buckets public
  • Search security group with inbound rule for 0.0.0.0/0
  • Search elastic ip dissociated
  • Search volumes available
  • Search AMIs with permission public
  • Search internet gateways detached

Also Read – nmapAutomator : A Script That You Can Run In The Background

Install requirements

pip3 install –user -r requirements.txt

Environment variables

IAM_MAX_ACCESS_KEY_AGE default is 60 days.

Usage

Usage: aws_report.py [OPTIONS]

Options:
–s3 Search buckets public in s3
–iam Search iam users based on creation date
–sg Search security groups with inbound rule 0.0.0.0
–elasticip Search elastic IP not associated
–volumes Search volumes available
–ami Search AMIs with permission public
–owner TEXT Defines the owner of the resources to be found
–igw Search internet gateways detached
–region TEXT Defines the region of resources
–help Show this message and exit.

Examples

python3 aws_report.py –s3
python3 aws_report.py –iam
python3 aws_report.py –owner 296193067842 –ami

Running In Docker

docker run -it -e AWS_ACCESS_KEY_ID=you-access-key -e AWS_SECRET_ACCESS_KEY=you-secret-key gmdutra/aws-report –s3

R K

Recent Posts

Shadow-rs : Harnessing Rust’s Power For Kernel-Level Security Research

shadow-rs is a Windows kernel rootkit written in Rust, demonstrating advanced techniques for kernel manipulation…

1 week ago

ExecutePeFromPngViaLNK – Advanced Execution Of Embedded PE Files via PNG And LNK

Extract and execute a PE embedded within a PNG file using an LNK file. The…

2 weeks ago

Red Team Certification – A Comprehensive Guide To Advancing In Cybersecurity Operations

Embark on the journey of becoming a certified Red Team professional with our definitive guide.…

3 weeks ago

CVE-2024-5836 / CVE-2024-6778 : Chromium Sandbox Escape via Extension Exploits

This repository contains proof of concept exploits for CVE-2024-5836 and CVE-2024-6778, which are vulnerabilities within…

3 weeks ago

Rust BOFs – Unlocking New Potentials In Cobalt Strike

This took me like 4 days (+2 days for an update), but I got it…

3 weeks ago

MaLDAPtive – Pioneering LDAP SearchFilter Parsing And Security Framework

MaLDAPtive is a framework for LDAP SearchFilter parsing, obfuscation, deobfuscation and detection. Its foundation is…

3 weeks ago