On: Show HN: Endgame – An AWS Pentesting tool to backd...

[Operyl]

I'm impressed you were able to get your employer (Salesforce) to actually let you publish this under their organization. Kudos to that.

[mushufasa → Operyl]

Salesforce also runs Heroku, which is one of the biggest AWS wrappers around. I'm really glad they're active in security auditing here, it's a real value add to customers of Heroku / Salesforce services to see evidence of their work to analyze security.

[kerng → Operyl]

Yes, surprised also, given past stories around Defcon.

I think it's great to have audit tools like this. It makes people realize how vulnerable their accounts are.

Does a similar tool exist for Salesforce and Heroku?

[jasperran → Operyl]

Not sure what the shock is with seeing security tools like this released, the vast majority of security tools are open source, how is this different to what we have been seeing the past 30 year?

Not to mention companies such as Google, Netflix and Mozilla all release security tools just like this.

[Mandatum → Operyl]

I guess they didn't.

[Operyl → Mandatum]

That’s what I was expecting to happen, unfortunately.