search

HackTricks-wiki / hacktricks-cloud

519 stars 204 forks source link

arte-Ghost1nth3SSH #38

Closed Ghost1nTh3SSH closed 4 months ago

Ghost1nTh3SSH commented 4 months ago

1) Bash script for KMS enumeration Example output:

Key ID: <redacted> - Access Denied!
Key ID: <redacted>

    Basic Info:

        - Managed By: CUSTOMER
        - Enabled: true
        - Description: KMS key for encrypting credentials (kms-lab-1)
        - KeyState: Enabled

    Policy details for: "default"

        - Action: kms:*
        - Resource: *
        - Effect: Allow
        - Principal: <redacted>

        - Action: [kms:GetKeyPolicy, kms:ListKeyPolicies, kms:DescribeKey]
        - Resource: *
        - Effect: Allow
        - Principal: <redacted>

        - Action: kms:PutKeyPolicy
        - Resource: *
        - Effect: Allow
        - Principal: <redacted>

Key ID: <redacted> - Access Denied!

2) One liner for setting up ENV vars from STS Assume Role (Credit to: https://stackoverflow.com/a/67636523)