AWS IAM Privilege Escalation Scanner

AWS IAM Privilege Escalation Scanner

Tool for analysis of policies IAM for detect vectors of escalation:

n
• Policy analyzer — Parsea all the policies IAM (managed, inline, group, role) and detects permisos peligrosos.
n
• Privesc paths — Identifica 21+ techniques of escalation: iam:CreatePolicyVersion, iam:AttachUserPolicy, iam:PassRole + lambda:CreateFunction, etc.
n
• AssumeRole chains — Mapea cadenas of AssumeRole that allowsn jumpsr between roles up to llegar a admin.
n
• Wildcard detection — Detecta Resource: * with Actions peligrosos.
n
• Report — Genera report HTML with grafos of escalation and recomendaciones of remediation.
n

Requirements: Credentials AWS with permisos of lectura IAM (iam:List*, iam:Get*). Python 3 + boto3.