AWS Penetration Testing

原文涵盖的主题

• AWS Penetration Testing
• Purpose
• Inputs/Prerequisites
• Outputs/Deliverables
• Essential Tools
• Core Workflow
• Step 1: Initial Enumeration
• Step 2: IAM Enumeration

Provide comprehensive techniques for penetration testing AWS cloud environments. Covers IAM enumeration, privilege escalation, SSRF to metadata endpoint, S3 bucket exploitation, Lambda code extraction, and persistence techniques for red team operations. AWS CLI configured with credentials Valid AWS credentials (even low-privilege) Understanding of AWS IAM model Python 3, boto3 library Tools: Pacu, Prowler, ScoutSuite, SkyArk IAM privilege escalation paths Extracted credentials and secrets Compromised EC2/Lambda/S3 resources Persistence mechanisms Security audit findings -- | Tool | Purpose | Installation | |------|---------|--------------| | Pacu | AWS exploitation framework | git clone https://github.com/RhinoSecurityLabs/pacu | | SkyArk | Shadow Admin discovery | Import-Module .\SkyArk.ps1 | | Prowler | Security auditing | pip install prowler | | ScoutSuite | Multi-cloud auditing | pip install scoutsuite | | enumerate-iam | Permission enumeration | git clone https://github.com/andresriancho/enumerate-iam | | Principal Mapper | IAM analysis | pip install principalmapper | -- Identify the compromised identity and permissions: Exploit SSRF to access metadata endpoint (IMDSv1): For I

这里只展示节选，请以完整原文和当前要求为准。