dagrz/aws_pwn

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1223 stars · 192 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A collection of Python scripts for penetration testing AWS environments, covering reconnaissance, exploitation, stealth, exploration, and privilege escalation. It uses boto3 and AWS credentials to enumerate accounts, validate access keys and principals, dump account data, and attempt lateral movement via role assumption.

Use cases

• pentest an AWS account
• validate leaked AWS access keys
• enumerate IAM roles and attempt to assume them
• dump EC2 instance user data for secrets
• check whether S3 bucket names exist
• disrupt CloudTrail logging during a red team engagement
• take a snapshot of all resources in an AWS account

When to choose

• you are doing authorized penetration testing or red teaming against AWS
• you need quick ad-hoc scripts for AWS recon and privilege escalation
• you want a grab-bag of AWS attack tooling to adapt rather than a polished framework

When to avoid

• you need a maintained, well-tested cloud security tool - the code is self-described as 'horribly written' and scripts may break as AWS changes
• you want vulnerability scanning or compliance auditing rather than offensive testing
• you need a supported tool for production environments - there is no license and no guarantee of upkeep

Facets

cli-tool · maturity maintenance

penetration-testing security osint developer-tools security cloud-computing penetration-testing developer-tools python cli windows aws cloud-security red-team boto3 iam privilege-escalation reconnaissance linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="dagrz/aws_pwn")