{"id":13453671,"url":"https://github.com/Tenable/EscalateGPT","last_synced_at":"2025-03-24T01:31:40.565Z","repository":{"id":159814938,"uuid":"629614637","full_name":"tenable/EscalateGPT","owner":"tenable","description":"An AI-powered tool for discovering privilege escalation opportunities in AWS IAM configurations.","archived":false,"fork":false,"pushed_at":"2024-10-03T08:04:29.000Z","size":181,"stargazers_count":105,"open_issues_count":6,"forks_count":11,"subscribers_count":8,"default_branch":"master","last_synced_at":"2025-03-22T01:46:32.499Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tenable.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE.md","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2023-04-18T17:06:05.000Z","updated_at":"2025-03-04T09:28:23.000Z","dependencies_parsed_at":null,"dependency_job_id":"c3ffc73a-c770-4a8e-b902-22d3c9feaf0c","html_url":"https://github.com/tenable/EscalateGPT","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tenable%2FEscalateGPT","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tenable%2FEscalateGPT/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tenable%2FEscalateGPT/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tenable%2FEscalateGPT/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tenable","download_url":"https://codeload.github.com/tenable/EscalateGPT/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":245194267,"owners_count":20575732,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-07-31T08:00:45.377Z","updated_at":"2025-03-24T01:31:40.537Z","avatar_url":"https://github.com/tenable.png","language":"Python","funding_links":[],"categories":["Cloud Security"],"sub_categories":[],"readme":"\u003cp align=\"center\"\u003e\n    \u003cimg src=\"assets/logo.png\" width=\"250\"/\u003e\n\u003c/p\u003e\n\n## Introduction\n\n IAM Privilege Escalation Identification Tool\n\n## Features\n\n- 🛠️ Identifies potential privilege escalation issues in AWS IAM and Azure RBAC policies\n- 💻 Leverages most advanced AI models via OpenAI for analysis\n- 👍 Returns escalation paths and mitigation recommendations in easy to understand JSON format\n- 🔑 Designed to integrate with and enhance Tenable Cloud Security cloud configuration auditing\n\n## Summary\nEscalateGPT is a Python tool designed to identify privilege escalation opportunities in Amazon Web Services (AWS) and Azure Identity and Access Management (IAM) policies. \nIt can help security teams find misconfigurations in IAM permissions that could allow unauthorized access or privilege escalation.\nThe tool retrieves all IAM policies associated with users or groups in an AWS account or AzureAD, and passes them to the OpenAI API to analyze. OpenAI will attempt to identify any potential ways those policies could be exploited to gain elevated permissions, as well as recommend mitigation strategies.\n\nIn testing, EscalateGPT leveraging GPT-4 managed to identify complex privilege escalation scenarios based on non-trivial IAM.\n## Requirements\n\n1. Python 3.7\n2. OpenAI API Key\n\n## Installation\n\n```sh\ngit clone https://github.com/tenable/EscalateGPT.git\ncd EscalateGPT\npip install -r requirements.txt\n```\n## Usage\n\n### AWS\n```sh\npython openapi_script.py YOUR_OPENAPI_KEY --platform AWS --aws-key YOUR_AWS_KEY --aws-secret YOUR_AWS_SECRET\n```\n### Azure\n```sh\npython openapi_script.py YOUR_OPENAPI_KEY --platform AZURE --username YOUR_AZURE_USERNAME --password YOUR_AZURE_PASSWORD --tenant-id YOUR_AZURE_TENANT_ID\n```\n\n## Contributing\nEscalateGPT is an open source tool. Contributions to improve capability to find additional privilege escalation vectors are welcome!\n\n## Disclaimer\n\nThis tool is provided for educational and research purposes only. The authors assume no liability and are not responsible for any misuse or damage caused by this tool.\n\n## License\n\nThis project is licensed under the GPL License. See the LICENSE file for more details._","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FTenable%2FEscalateGPT","html_url":"https://awesome.ecosyste.ms/projects/github.com%2FTenable%2FEscalateGPT","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FTenable%2FEscalateGPT/lists"}