An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share the resources with the entire internet 😈

This page summarizes the projects mentioned and recommended in the original post on reddit.com/r/aws

Our great sponsors
  • Scout APM - Less time debugging, more time building
  • SonarQube - Static code analysis for 29 languages.
  • SaaSHub - Software Alternatives and Reviews
  • endgame

    An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share the resources with the entire internet 😈 (by salesforce)

  • endgame

    An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share the resources with the entire internet 😈 (by agnivesh)

    Nope... https://github.com/agnivesh/endgame and 64 other forks.... 😬 Once something has been public on GitHub and people have taken a liking to it, it's there forever.

  • Scout APM

    Less time debugging, more time building. Scout APM allows you to find and fix performance issues with no hassle. Now with error monitoring and external services monitoring, Scout is a developer's best friend when it comes to application development.

  • aws-nuke

    Nuke a whole AWS account and delete all its resources.

    I get that it'd do damage if run by a user on an active account but so would https://github.com/rebuy-de/aws-nuke or an unchecked Terraform module example, or a container in an EKS cluster with overly permissive instance profile or a containerised CICD tool with heavy privileges in the orchestrator.

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts