RhinoSecurityLabs / pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
https://rhinosecuritylabs.com/aws/pacu-open-source-aws-exploitation-framework/
BSD 3-Clause "New" or "Revised" License
4.3k stars 689 forks source link

- Update iam__enum_permissions module #438

Closed TeneBrae93 closed 3 months ago

TeneBrae93 commented 3 months ago

When a user runs "iam__enum_permissions", the module provides them with an overview of permissions in this format:

[iam__enum_permissions] MODULE SUMMARY:

  11 Confirmed permissions for user: cg-sns-user-sns_secrets_cgid01anefb2lz.
   0 Confirmed permissions for 0 role(s).
   0 Unconfirmed permissions for 0 user(s).
   0 Unconfirmed permissions for 0 role(s).

It's likely because I'm a Pacu noob, but it took me some time to figure out how to actually read the permissions it enumerated. This very minor fix will tell the user to type "whoami" to see a detailed list of permissions to save time for noobs like me when first using the module.

image