Show HN: Endgame – An AWS Pentesting tool to backdoor or expose AWS resources

This page summarizes the projects mentioned and recommended in the original post on news.ycombinator.com

InfluxDB - Power Real-Time Data Analytics at Scale
Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
www.influxdata.com
featured
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com
featured
  • endgame

    Discontinued An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share the resources with the entire internet 😈 (by salesforce)

  • 404. Did they pull the repo or make it private?

    https://github.com/salesforce/endgame

  • policy_sentry

    IAM Least Privilege Policy Generator

  • @kmcquade ur awesome ! we are users of https://github.com/salesforce/policy_sentry and definitely definitely https://github.com/salesforce/cloudsplaining .

    If I could give you guys money, I would. You should totally build a startup around it.

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo
  • cloudquery

    The open source high performance ELT framework powered by Apache Arrow

  • Cool. Another tool in the space - https://github.com/cloudquery/cloudquery open-source framework to ask questions about your cloud infrastructure with SQL.

  • endgame

    Discontinued An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share the resources with the entire internet 😈 (by kmcquade)

  • The main repository seems to have been taken down but it is still available at https://github.com/kmcquade/endgame and on Pypi

  • endgame

    An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share the resources with the entire internet 😈 (by agnivesh)

  • Here is one of many forks: https://github.com/agnivesh/endgame/

  • endgame

    Discontinued An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share the resources with the entire internet 😈

  • https://github.com/brandongalbraith/endgame still has it as of this morning, the several I marked last night waiting to ask at work about it have disappeared, so dunno how long this one will be tehre.

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts

  • Azure and M365 Secure Config Review

    2 projects | /r/Pentesting | 31 May 2023
  • Open source alternative cloud security tool that works like Wiz/Lacework/Aqua

    8 projects | /r/cybersecurity | 6 Mar 2023
  • CSPM opensource suggestions

    9 projects | /r/cloudsecurity | 15 Jan 2023
  • How to do AWS security assesment?

    4 projects | /r/u_athanielx | 8 Dec 2022
  • AWS Security Checklist

    1 project | /r/cybersecurity | 28 May 2022