andresriancho/nimbostratus

Stars
429
Rank 101,271 (Top 2 %)
Language
Python
License
GNU Affero Genera...
Created over 11 years ago
Updated about 2 years ago

andresriancho/nimbostratus

andresriancho

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Tools for fingerprinting and exploiting Amazon cloud infrastructures

Nimbostratus

Tools for fingerprinting and exploiting Amazon cloud infrastructures. These tools are a PoC which I developed for my "Pivoting in Amazon clouds" talk, developed using the great boto library for accessing Amazon's API.

For more information visit the project page

Feel free to report bugs, fork and send pull-requests. You can also drop me a line at @w3af.

w3af

w3af: web application attack and audit framework, the open source web vulnerability scanner.

enumerate-iam

Enumerate the permissions associated with AWS credential set

race-condition-exploit

Tool to help with the exploitation of web application race conditions

websocket-fuzzer

HTML5 WebSocket message fuzzer

mongo-objectid-predict

Predict Mongo ObjectIds

jwt-fuzzer

cc-lambda

Search the common crawl using lambda functions

secure-ubuntu-desktop

Maintain a list of tips and tricks to be used by Ubuntu users to secure their laptops.

w3af-webui

Django Web UI contributed by Yandex for w3af.

vpc-vpn-pivot

Pivot into private VPC networks using a VPN connection

django-moth

A Django vulnerable Web application for testing the w3af framework

w3af-moth

A set of vulnerable PHP scripts used to test w3af's vulnerability detection features.

w3af-kali

w3af packaging for Kali distribution

splunk-logger

A logging handler for Splunk. Lets you send information to Splunk directly from your Python code.

aws-audit-automation

Tools to automate AWS Cloud security assessments

nimbostratus-target

This repository holds a target infrastructure you can use for running the nimbostratus tools.

w3af-api-client

REST API client to consume w3af

pico-wavsep

A minimalistic way to run WAVSEP

docker-anomalies

Docker container anomaly detection

aws-backup

AWS Backup implementation in terraform

owaspantisamy

Automatically exported from code.google.com/p/owaspantisamy

pico

Tool to identify and exploit timing attacks

burp-proxy-search

Burp suite HTTP history advanced search

w3af-module

Tools to install w3af as a Python module

docker-tag-naming

A small tool that helps name docker tags

sentinela

Sentinela is a highly configurable operating system watchdog which can take actions based on pre-configured rules.

collector

Collect performance metrics for any software using AWS

w3af-api-docker

Docker image for w3af REST API with nginx, uwsgi and supervisord

w3af-packages

Files and utilities that define w3af packages and installers for Windows, Debian, FreeBSD, etc.

w3af-qa

Quality related stuff for w3af.

dirty-dependency-check

Vulnerability dependency check for Maven projects

django-uwsgi-nginx-ssh

Django 1.5.1 with uwsgi, nginx and SSH.

cryptopals

My solutions to the cryptopals challenge

hash-blender

Takes various inputs and separators, mixes them, applies a hash function and verifies if match was found

w3af-performance-analysis

Analysis tool for performance output generated by w3af

py-xchat-twitter

Twitter client written as an XChat plugin (Python)

pico-string-compare-local

String comparison scripts for pico

qotd

A simple quote of the day library

w3af-misc

Misc code loosely related to the w3af project.

burp-extensions

Collection of Burp extensions

w3af-kali-ci

A helper repository to build w3af-kali in CircleCI

django-registration

https://bitbucket.org/ubernostrum/django-registration with minor modifications

django-rest-framework-timing

Minimalistic Django REST framework to test timing attacks

high-entropy-json

Call Lyft's high-entropy-string for each string in a JSON document