Show HN: Endgame – An AWS Pentesting tool to backdoor or expose AWS resources

Re:Show HN: Endgame – An AWS Pentesting tool to backdoor or ... by Operyl on Tuesday February 16, 2021 @10:09AM (#26154519)

I'm impressed you were able to get your employer (Salesforce) to actually let you publish this under their organization. Kudos to that.

[ Parent | on HN ]

Re:Show HN: Endgame – An AWS Pentesting tool to backdoor or ... by mushufasa on Tuesday February 16, 2021 @10:40AM (#26154875)

Salesforce also runs Heroku, which is one of the biggest AWS wrappers around. I'm really glad they're active in security auditing here, it's a real value add to customers of Heroku / Salesforce services to see evidence of their work to analyze security.

[ Parent | on HN ]

Re:Show HN: Endgame – An AWS Pentesting tool to backdoor or ... by kerng on Tuesday February 16, 2021 @11:46AM (#26155827)

Yes, surprised also, given past stories around Defcon.

I think it's great to have audit tools like this. It makes people realize how vulnerable their accounts are.

Does a similar tool exist for Salesforce and Heroku?

[ Parent | on HN ]

Re:Show HN: Endgame – An AWS Pentesting tool to backdoor or ... by jasperran on Tuesday February 16, 2021 @02:20PM (#26157659)

Not sure what the shock is with seeing security tools like this released, the vast majority of security tools are open source, how is this different to what we have been seeing the past 30 year?

Not to mention companies such as Google, Netflix and Mozilla all release security tools just like this.

[ Parent | on HN ]

Re:Show HN: Endgame – An AWS Pentesting tool to backdoor or ... by Mandatum on Tuesday February 16, 2021 @11:48PM (#26162817)

I guess they didn't.

[ Parent | on HN ]

Re:Show HN: Endgame – An AWS Pentesting tool to backdoor or ... by Operyl on Wednesday February 17, 2021 @03:28AM (#26164039)

That’s what I was expecting to happen, unfortunately.

[ Parent | on HN ]