# dagrz/aws_pwn

A collection of AWS penetration testing junk

Repository: https://github.com/dagrz/aws_pwn
Canonical: https://ross.abutalabs.com/products/aws_pwn
Language: Python
License Family: other
Last push: 2023-08-30T11:12:51+00:00

## Health v2 (maintenance only)
Score: 32/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 0, release rhythm 35, longevity 100
- inputs: {"age_days": 3606, "days_push": 1099, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases, no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1223, forks 192 (observed 2026-08-28T04:04:02.757891+00:00)

## What it is
A collection of Python scripts for penetration testing AWS environments, covering reconnaissance, exploitation, stealth, exploration, and privilege escalation. It uses boto3 and AWS credentials to enumerate accounts, validate access keys and principals, dump account data, and attempt lateral movement via role assumption.

## Use cases
- pentest an AWS account
- validate leaked AWS access keys
- enumerate IAM roles and attempt to assume them
- dump EC2 instance user data for secrets
- check whether S3 bucket names exist
- disrupt CloudTrail logging during a red team engagement
- take a snapshot of all resources in an AWS account

## When to choose
- you are doing authorized penetration testing or red teaming against AWS
- you need quick ad-hoc scripts for AWS recon and privilege escalation
- you want a grab-bag of AWS attack tooling to adapt rather than a polished framework

## When to avoid
- you need a maintained, well-tested cloud security tool - the code is self-described as 'horribly written' and scripts may break as AWS changes
- you want vulnerability scanning or compliance auditing rather than offensive testing
- you need a supported tool for production environments - there is no license and no guarantee of upkeep

## Facets
- artifact type: cli-tool
- maturity: maintenance
- function: penetration-testing, security, osint, developer-tools
- domain: security, cloud-computing, penetration-testing, developer-tools
- platform: python, cli, windows
- tags: aws, cloud-security, red-team, boto3, iam, privilege-escalation, reconnaissance, linux, macos

## Member repositories
- dagrz/aws_pwn (main) score 32

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:04:02.757891+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T06:15:31.809311+00:00, confidence not recorded.
  - readme: https://github.com/dagrz/aws_pwn (fetched 2026-08-28T04:04:02.757891+00:00, sha 679d9421d211)
- Data as of 2026-08-30T08:39:29.467469+00:00.