{"id":13845374,"url":"https://github.com/sebastian-mora/AWS-Loot","last_synced_at":"2025-07-12T02:31:03.160Z","repository":{"id":44563221,"uuid":"237697499","full_name":"sebastian-mora/AWS-Loot","owner":"sebastian-mora","description":"Pull secrets from an AWS environment ","archived":false,"fork":false,"pushed_at":"2020-02-02T00:51:56.000Z","size":102,"stargazers_count":69,"open_issues_count":0,"forks_count":25,"subscribers_count":4,"default_branch":"master","last_synced_at":"2024-08-05T17:44:25.689Z","etag":null,"topics":["aws","pentest-tool","pentesting","red-team","security","security-tools"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/sebastian-mora.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2020-02-02T00:25:46.000Z","updated_at":"2024-04-11T17:52:02.000Z","dependencies_parsed_at":"2022-09-02T16:59:14.453Z","dependency_job_id":null,"html_url":"https://github.com/sebastian-mora/AWS-Loot","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sebastian-mora%2FAWS-Loot","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sebastian-mora%2FAWS-Loot/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sebastian-mora%2FAWS-Loot/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sebastian-mora%2FAWS-Loot/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/sebastian-mora","download_url":"https://codeload.github.com/sebastian-mora/AWS-Loot/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":225784456,"owners_count":17523652,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["aws","pentest-tool","pentesting","red-team","security","security-tools"],"created_at":"2024-08-04T17:03:22.082Z","updated_at":"2024-11-21T18:31:26.899Z","avatar_url":"https://github.com/sebastian-mora.png","language":"Python","funding_links":[],"categories":["Python"],"sub_categories":[],"readme":"# AWS_Loot\n\nSearches an AWS environment looking for secrets, by enumerating environment variables and source code. This tool allows quick enumeration over large sets of AWS instances and services.\n\n![](screenshot/tool.gif)\n\n## Install\n\n```\npip install -r requirements.txt\n```\nAn AWS credential file (.aws/credentials) is required for authentication to the target environment\n   - Access Key\n   - Access Key Secret \n\n## How it works\n\nAwsloot works by going through EC2, Lambda, CodeBuilder instances and searching for high entropy strings. The EC2 Looter works by querying all available instance ID's in all regions and requesting instance's USERDATA where often developers leave secrets. \nThe Lambda looter operates across regions as well. Lambada looter can search all available versions of a found function. \nIt starts by searching the functions environment variables then downloads the source code and scans the source for secrets. \nThe Codebuilder Looter works by searching for build instances and searching those builds for environment variables that might contain secrets.\n\n## Usage\n```\nPython3 awsloot.py \n```\n \n## Next Features\n  - Allow users to specify an ARN to scan\n  - Looter for additional services \n\n  \n\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsebastian-mora%2FAWS-Loot","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fsebastian-mora%2FAWS-Loot","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsebastian-mora%2FAWS-Loot/lists"}