Repository files navigation

auspex [ˈau̯s.pɛks] noun: An augur of ancient Rome, especially one who interpreted omens derived from the observation of birds.

awspx is a graph-based tool for visualizing effective access and resource relationships within AWS. It resolves policy information to determinewhat actions affectwhich resources, while taking into account how these actions may be combined to produce attack paths. Unlike tools likeBloodhound, awspx requires permissions to function — it is not expected to be useful in cases where these privileges have not been granted.

• Getting Started
  • Installation
  • Usage
• Contributing
• License

For more information, checkout theawspx Wiki

For detailed installation instructions, usage, and answers to frequently asked questions, see sections:Setup;Data Collection andExploration; andFAQs, respectively.

awspx can beinstalled on either Linux or macOS.In each caseDocker is required.

1. Clone this repo

git clone https://github.com/FSecureLABS/awspx.git

2. Run theINSTALL script

cd awspx&& ./INSTALL

awspx consists of two main components: theingestor,which collects AWS account data; and theweb interface,which allows you to explore it.

1. Run theingestor against an account of your choosing.You will be prompted forcredentials.

   awspx ingest

   OR optionally forgo this step andload the sample dataset instead.

   awspx db --load-zip sample.zipawspx attacks

2. Browse to theweb interface —http://localhost by default — andexplore this environment.

   
   

This project is in its early days and there's still plenty that can be done. Whether its submitting a fix, identifying bugs, suggesting enhancements, creating or updating documentation, refactoring smell code, or even extending this list — all contributions help and are more than welcome. Please feel free to use your judgement and do whatever you think would benefit the community most.

SeeContributing for more information.

awspx is a graph-based tool for visualizing effective access and resource relationships within AWS. (C) 2018-2020 F-SECURE.

This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with this program. If not, seehttps://www.gnu.org/licenses/.