Show HN: Endgame – An AWS Pentesting tool to backdoor or expose AWS resources

Re:Show HN: Endgame – An AWS Pentesting tool to backdoor or ... by bwaine on Tuesday February 16, 2021 @09:47AM (#26154285)

It would be nice if this was the other way round :'''''(

# this will ruin your day

endgame smash --service all --evil-principal ""

# This will show you how your day could have been ruined

endgame smash --service all --evil-principal "" --dry-run

Looks like it can be reversed with --undo, but brown trousers time if you groggily run it at 08:30am coffee in hand.

[ Parent | on HN ]

Re:Show HN: Endgame – An AWS Pentesting tool to backdoor or ... by gchamonlive on Tuesday February 16, 2021 @09:59AM (#26154415)

dry run should be the default, and for you to actually do damage, you should explicitly run with a flag like `--commit` or `--deploy-evil-payload "yes I am certain of this"`

[ Parent | on HN ]

Re:Show HN: Endgame – An AWS Pentesting tool to backdoor or ... by kmcquade on Tuesday February 16, 2021 @10:00AM (#26154437)

Dry run as default is a good idea. I'll open a GitHub issue for that.

FWIW, if you run `endgame smash` with `--service all`, then it spits out a huge "WARNING" in ASCII art with an explanation and a confirmation prompt.

But I agree, we should have dry-run on by default.

[ Parent | on HN ]

Re:Show HN: Endgame – An AWS Pentesting tool to backdoor or ... by Serow225 on Tuesday February 16, 2021 @03:01PM (#26158095)

Yes please, thanks!!

[ Parent | on HN ]