AccessDeniedException not handled throughout enum_monitoring module

RhinoSecurityLabs / pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

https://rhinosecuritylabs.com/aws/pacu-open-source-aws-exploitation-framework/

BSD 3-Clause "New" or "Revised" License

4.36k stars 692 forks source link

AccessDeniedException not handled throughout enum_monitoring module #74

Closed ansorren closed 6 years ago

ansorren commented 6 years ago

Using a key that doesn't have permissions to make those calls will result in the AccessDeniedException, and since it's not passed in the module the enumeration will stop.

For example: <class 'botocore.exceptions.ClientError'>: An error occurred (AccessDeniedException) when calling the ListDetectors operation: User: arn:aws:iam::xxx:user/janedoe is not authorized to perform: guardduty:ListDetectors on resource: arn:aws:guardduty:ap-southeast-1:xxx:detector/*

SpenGietz commented 6 years ago

This fix has been merged into dev: https://github.com/RhinoSecurityLabs/pacu/pull/75

It will be merged into master next Monday or Tuesday I believe. Thanks for your report! I'll close this when it makes it to master

SpenGietz commented 6 years ago

Just now merged to master!