aws_access_key_scan 0.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: d94e2d7d1a1ed775f0e736eb673e3bd257b03216
+  data.tar.gz: e9e09c6129f51b3630205bcb43352b415c55fea1
+SHA512:
+  metadata.gz: bc5820ce74fc3cd0e957b487895f8e4c616687cecc31871775d9b9acd3dbb23d5753937e7405775f4e13921a85cabac0a57cc840d79f6944681e2845275324d3
+  data.tar.gz: ff2af0f8345db2aafa350870e8ee81f34f16427dc825d5cc266e3ac35d05587712f0ba5c17d4e95c78ea3f051bb4d8181464fce92509ef2c7a2e04721c36081c

data/AWSAccessKeyScan.gemspec

@@ -0,0 +1,25 @@
+# coding: utf-8
+#lib = File.expand_path('../lib', __FILE__)
+#$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+
+Gem::Specification.new do |spec|
+  spec.name          = "aws_access_key_scan"
+  spec.version       = 0.1
+  spec.authors       = ["Anthony Johnson"]
+  spec.email         = ["ansoni@gmail.com"]
+  spec.description   = %q{Scans your computer for easy to find AWS Access Keys}
+  spec.summary       = %q{Scans your computer for easy to find AWS Access Keys}
+  spec.homepage      = ""
+  spec.license       = "Proprietary"
+
+  spec.files         = `git ls-files`.split($/)
+  spec.executables   = spec.files.grep(%r{^bin/}) { |f| File.basename(f) }
+  spec.test_files    = spec.files.grep(%r{^(test|spec|features)/})
+  spec.require_paths = ["lib"]
+
+  spec.add_development_dependency "rake"
+  spec.add_development_dependency "bundler", "~> 1.3"
+  spec.add_runtime_dependency "nokogiri"
+  spec.add_runtime_dependency "aws-sdk"
+
+end

data/Gemfile

@@ -0,0 +1,3 @@
+source 'https://rubygems.org'
+
+gemspec

data/Gemfile.lock

@@ -0,0 +1,28 @@
+PATH
+  remote: .
+  specs:
+    AWSAccessKeyScan (0.1)
+      aws-sdk
+      nokogiri
+
+GEM
+  remote: https://rubygems.org/
+  specs:
+    aws-sdk (1.34.0)
+      json (~> 1.4)
+      nokogiri (>= 1.4.4)
+      uuidtools (~> 2.1)
+    json (1.8.1)
+    mini_portile (0.5.2)
+    nokogiri (1.6.1)
+      mini_portile (~> 0.5.0)
+    rake (10.1.1)
+    uuidtools (2.1.4)
+
+PLATFORMS
+  ruby
+
+DEPENDENCIES
+  AWSAccessKeyScan!
+  bundler (~> 1.3)
+  rake

data/README.md

@@ -0,0 +1,33 @@
+# AWSAccessKeyScan
+===================
+
+Scans your computer for easy to find AWS Access Keys
+
+## Usage
+
+	bundle
+	./bin/aws_access_scan -h
+
+	$ ./bin/access_key_scan -h
+	Usage: example.rb [options]
+	    -d, --directory [DIRECTORY]      Directory to Scan - Defaults to /
+	    -o, --output_file [FILE_NAME]    File to Output Results to
+
+If you run with no arguments it will scan from your entire computer
+
+## Output
+
+	$ ./bin/access_key_scan -d ~/Downloads
+	Processed 0 Files
+	Found file /Users/someuser/Downloads/credentials.csv-2.txt, usable: false
+	Found file /Users/someuser/Downloads/credentials.csv-3.txt, usable: false
+	Found file /Users/someuser/Downloads/credentials.csv-4.txt, usable: false
+	Found file /Users/someuser/Downloads/credentials.csv-5.txt, usable: true
+	Found file /Users/someuser/Downloads/credentials.csv.txt, usable: false
+
+## Todo/Help
+
+Fork and send me a Pull Request
+
+
+

data/Rakefile

@@ -0,0 +1 @@
+require "bundler/gem_tasks"

data/bin/access_key_scan

@@ -0,0 +1,104 @@
+#!/usr/bin/env ruby
+require 'rubygems'
+require 'bundler/setup'
+require 'aws-sdk'
+require 'optparse'
+
+options = {}
+OptionParser.new do |opts|
+  opts.banner = "Usage: example.rb [options]"
+
+  opts.on("-d", "--directory [DIRECTORY]", String, "Directory to Scan - Defaults to /") do |v|
+    options[:start_dir] = v
+  end
+  opts.on("-o", "--output_file [FILE_NAME]", String, "File to Output Results to") do |v|
+    options[:output_file] = v
+  end
+  opts.on("--output_type [TYPE]", [:yaml],
+              "Select output type (yaml)") do |t|
+    options[:output_type] = t
+  end
+end.parse!
+options[:start_dir] ||= '/'
+$str = "User Name,Access Key Id"
+$files_processed = 0
+$results=[]
+
+# Iterate a Directory
+def process_dir(dir)
+    Dir.foreach(dir) do |item|
+      next if item == '.' or item == '..'
+      file_item = File.join(dir,item)
+      begin
+        process_dir(file_item) if File.directory?(file_item) and not FileTest.symlink?(file_item)
+      rescue StandardError => e
+        #ignore
+      end
+      begin
+        process_file(file_item) if File.file?(file_item)
+      rescue StandardError => e
+        #ignore
+      end
+    end
+end
+
+# Peer inside of a file for AWS Creds
+def process_file(file)
+  contents = File.read(file,$str.length)
+  if contents == $str
+    test_creds(file)
+  end
+  $files_processed += 1
+end
+
+# Test the Creds to see if they work
+def test_creds(file)
+  usable = false
+  begin
+    lines = File.readlines(file)
+    items = lines[1].split(',')
+    #puts "|#{items[1]}| : |#{items[2]}|"
+    ec2 = AWS::EC2.new(
+      :access_key_id =>items[1],
+      :secret_access_key => items[2])
+    begin
+      ec2.regions.each do |region| 
+      end
+      usable = true
+    rescue AWS::Errors::ClientError => ce
+      # ignore, usable is already false
+    end
+  rescue StandardError => e
+    puts "An Unknown Error #{e.to_s}"
+    usable = nil
+  end
+  puts "Found file #{file}, usable: #{usable}"
+  $results << { :filename => file, :usable => usable }
+end
+
+# Simple way for us to see that this thing is doing something
+def show_process
+  while true
+    before_sleep = $files_processed
+    sleep(5)
+    after_sleep = $files_processed
+    puts "Processed #{after_sleep} Files - #{(after_sleep-before_sleep)/5} per second"
+  end
+end
+
+
+Thread.new do |thread|
+  show_process
+end
+
+process_dir options[:start_dir]
+if options[:output_file]
+  File.open(options[:output_file],'w') do |f|
+    #we only support one format so don't even see what was passed in:-/
+    f.write $results.to_yaml
+  end
+end
+# exit status is the number of found creds + 1 which will allow you to use
+# normal shell return status codes for errors
+exit! $results.length + 1
+

metadata

@@ -0,0 +1,107 @@
+--- !ruby/object:Gem::Specification
+name: aws_access_key_scan
+version: !ruby/object:Gem::Version
+  version: '0.1'
+platform: ruby
+authors:
+- Anthony Johnson
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2014-02-13 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: bundler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '1.3'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '1.3'
+- !ruby/object:Gem::Dependency
+  name: nokogiri
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: aws-sdk
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+description: Scans your computer for easy to find AWS Access Keys
+email:
+- ansoni@gmail.com
+executables:
+- access_key_scan
+extensions: []
+extra_rdoc_files: []
+files:
+- AWSAccessKeyScan.gemspec
+- Gemfile
+- Gemfile.lock
+- README.md
+- Rakefile
+- bin/access_key_scan
+homepage: ''
+licenses:
+- Proprietary
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.2.1
+signing_key: 
+specification_version: 4
+summary: Scans your computer for easy to find AWS Access Keys
+test_files: []