Coder Social home page Coder Social logo

bishopfox / iam-vulnerable Goto Github PK

View Code? Open in Web Editor NEW
444.0 444.0 82.0 80 KB

Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.

Home Page: https://labs.bishopfox.com/tech-blog/iam-vulnerable-an-aws-iam-privilege-escalation-playground

License: MIT License

HCL 99.86% JavaScript 0.14%

iam-vulnerable's People

Contributors

pasqua1e avatar pswalia2u avatar sethsec-bf avatar thecloudnativehacker avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

iam-vulnerable's Issues

Make example AWS credentials work with non-default profile

The command to add to the AWS credentials file currently only uses source_profile = default. This becomes a problem when you create the Terraform resources with a profile other than the default as defined in Other Use Cases. Without an understanding of the source_profile parameter, the AccessDenied error when trying to use a privesc profile could be confusing.

I manually modified each of the lines individually as I worked through the privilege escalation paths. The adjusted command below changes the lines to source_profile = nondefaultuser while also changing the account ID.

tail -n +7 aws_credentials_file_example | sed -e "s/111111111111/$(aws sts get-caller-identity | grep Account | awk -F\" '{print $4}')/g;s/default/nondefaultuser/g" >> ~/.aws/credentials

I'm not a sed expert so there could be some improvements.

.modules/supporting missing

.modules/supporting directory is missing. Init returns:

$ terraform init
Initializing modules...
- supporting in`

Error: Unreadable module directory

Unable to evaluate directory symlink: lstat modules/supporting: no such file
or directory


Error: Failed to read module directory

Module directory  does not exist or cannot be read.


Error: Unreadable module directory

Unable to evaluate directory symlink: lstat modules/supporting: no such file
or directory


Error: Failed to read module directory

Module directory  does not exist or cannot be read.

Solved by removing the following from main.tf:

module "supporting" {
  source = "./modules/supporting"
}

But I don't know how necessary the supporting folder is.

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.