New Findings - Githubissues

nccgroup / PMapper

A tool for quickly evaluating IAM permissions in AWS.

GNU Affero General Public License v3.0

1.41k stars 169 forks source link

Closed ncc-erik-steringer closed 3 years ago

ncc-erik-steringer commented 4 years ago

The following list are items to add to the analysis component:

[x] Local instance OS priv-esc with misconfigured instance profile role that has ssm:* or the like.
[x] Admins without MFA
[x] Admin actions callable without MFA
[x] Circular trust in Roles