---
id: 4048
title: "IAM Vulnerable - Assessing the AWS Assessment Tools"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/assessing-the-aws-assessment-tools"
published_at: "2021-09-23T00:00:00Z"
tags: ["cloud", "cloud-security", "aws", "pentesting", "privilege-escalation", "security-tools", "iam"]
phying_url: "https://phying.com/item/4048"
lang: en
---

# IAM Vulnerable - Assessing the AWS Assessment Tools

## Summary

Part two of the IAM Vulnerable series reviews AWS privesc discovery tools, PMapper, AWSPX, Pacu's iam__privesc_scan, and Cloudsplaining, finding none can catch all paths without false positives.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2021-09-23T00:00:00Z
- **Original:** https://bishopfox.com/blog/assessing-the-aws-assessment-tools
- **Phying News:** https://phying.com/item/4048