Ryan Gerstenkorn

cdn-proxy. Bypass CDN and WAF restrictions using CDN re-fronting.

awesome-cloud-sec. Awesome list for cloud security related projects

roles. Unauthenticated enumeration of AWS IAM Roles.

steampipe_alchemy. SQLAlchemy wrapper around Steampipe

nettomidi. Net -> MIDI (Listen to your network!)

marionette. Example of how an attacker might swap user data temporarily to execute arbitrary commands

liquidswards. Know, don’t guess, who can access what.

coderun. Running scripts in an isolated environment should be stupid easy

dockersnitch. Like little snitch but for docker

awsconfig. AWS Config Rules

EC2FakeImds. PoC based on https://blog.ryanjarv.sh/2020/10/19/imds-persistence.html

ctail. Tail enriched CloudTrail sessions from your terminal

bb. A work in-progress bug bounty pipeline toolkit in GoLang

UserDataSwap. Example of how an attacker might swap user data temporarily to execute arbitrary commands

Pacu2. Python

assume-role-id. RaaS (Roles as a Service) web app

aws-sdk-sts. Stub to warn users they installed the wrong library

puppet-randrust. Puppet module for randrust

randrust. Rust HTTP server that returns random bytes encoded with base64

gitrob. Reconnaissance tool for GitHub organizations

CloudScraper. CloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.

msh. Multivac Shell

PMapper. Caching+Parallelization fork of pmapper (will open a PR when this is ready)

omaha-build. [WIP] Windows omaha client

Reader. Swift

ryanjarv.github.io. Code for my blog hosted at https://blog.ryanjarv.sh