guardicore / monkey

Infection Monkey - An open-source adversary emulation platform
https://www.guardicore.com/infectionmonkey/
GNU General Public License v3.0
6.67k stars 785 forks source link

Zero Trust AWS IAM roles PE + S3 access test #439

Closed ShayNehmad closed 2 years ago

ShayNehmad commented 5 years ago

Check for AWS IAM roles on the EC2 machine and check for dangerous roles. Based on Rhino Security Labs' research.

ShayNehmad commented 4 years ago

We chose a different direction with #519, however this might still be useful (maybe to integrate into ScoutSuite even). Leaving open for now

mssalvatore commented 2 years ago

This doesn't fit Infection Monkey's current mission.