David Disu

aws-iam-privesc-lab-passrole-lambda

A deliberately vulnerable AWS environment simulating a real-world IAM privilege escalation attack chain via iam:PassRole and lambda:CreateFunction.

HCL

DEFCON34-BiC-Village-CTF

2 AWS cloud red team CTF challenges simulating IAM privilege escalation and DynamoDB stream exploitation attack scenarios.

HCL

sdirb

A simple concurrent directory-brute force tool.

Go

pwnsome-AWS

A comprehensive list of resources intended for AWS offensive security engagements.