DataDog / stratus-red-team

:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud
https://stratus-red-team.cloud
Apache License 2.0
1.78k stars 208 forks source link

New attack technique: Usage of SSM StartSession on multiple instances #477

Closed adanalvarez closed 7 months ago

adanalvarez commented 8 months ago

What does this PR do?

Just like https://github.com/DataDog/stratus-red-team/pull/467 the attack technique creates the same EC2 instances and its VPC in the warmup. In the attack phase, it uses StartSession to gain interactive access to multiple EC2 instances.

Motivation

Open Issue https://github.com/DataDog/stratus-red-team/issues/60

Checklist