{"repo":"PanosoikoGr/CloudTap","free":true,"listed":false,"github":"https://github.com/PanosoikoGr/CloudTap","clone":"git clone https://github.com/PanosoikoGr/CloudTap.git","description":"Comprehensive AWS cloud reconnaissance and privilege escalation toolkit written in Python. Features IAM, EC2, S3, Lambda, ECS, Secrets Manager, and more — with multi-region scanning and auto-suggested privilege escalation paths.","language":"Python","stars":50,"topics":["automation","aws","cloud","pentesting","python3","security","security-audit"],"license":"MIT","category":"security-tools","readme_excerpt":"https://github.com/user-attachments/assets/ef236848-f054-495d-8f36-b215f9ed9105 Webpage Preview https://github.com/user-attachments/assets/8a228834-19cc-4677-a6d6-8d279b203b17 Features - Permissions Bruteforce - Uses every permission call API to test which one the user has - Passes them to priv esc suggester to find possible paths - Identity Inspection - Retrieves and prints details about the current IAM identity using STS. - IAM Policy Enumeration - Lists attached and inline policies for IAM users. - Extracts group memberships and attached/inlined group policies. - Extracts all versions of manahed policies - SNS Discovery - Able to find SNS and subscribe to them - List all SNS subscriptions - Secrets Discovery - Lists all secrets in AWS Secrets Manager. - Retrieves and prints contents of each secret securely. - S3 Bucket Support - Downloads all objects from a specified bucket into a local directory. - Beanstalk Support - Bruteforces all regions for beanstalkn instances and looking for eviroment veriables - Lambda functions - Get-Download-Enum Lambda functions and all region - EC2 Instance Analysis - Network Targets : Public/private IPs, DNS names, network interfaces - Attack Surface : Security groups with detailed rules, open ports, internet-facing services - Data & Privilege Escalation : EBS volumes (encrypted/unencrypted), IAM profiles, user data, tags - System Info : Instance types, platforms, key pairs, availability zones - Multi-region scanning with comprehensive summar","default_branch":null,"files":null,"tree":[],"storefront":"/r/PanosoikoGr","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/PanosoikoGr/CloudTap/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}