This is going to be a highly opinionated blog post. I think AWS is great and use it daily, but their implementation of IAM is unnecessarily complicated. If you can’t tolerate critics, don’t do ...

Event: July 31 & August 1 - https://www.blackhat.com/us-21/training/schedule/index.html#offensive-cloud-security-training-22060 August 2-3 - https://www.blackhat.com/us-21/t...

Cloud IP Ranges Description Most cloud providers publish up to date lists of their IP address ranges. This tools identifies if an IP belongs to a provider’s ranges by fetching and parsing the lat...

S3 Objects Check Description Whitebox evaluation of effective S3 object permissions, in order to identify publicly accessible objects. Allows identifying publicly accessible objects, as well as ...

NCC Research Blog: https://research.nccgroup.com/2020/10/01/tool-release-scoutsuite-5-10/ GitHub Release: https://github.com/nccgroup/ScoutSuite/releases/tag/5.10.0

NCC Research Blog: https://research.nccgroup.com/2020/07/02/tool-release-scoutsuite-5-9-0/ GitHub Release: https://github.com/nccgroup/ScoutSuite/releases/tag/5.9.0